craxs-rat[.]cc

craxs-rat.cc was registered on 21 February 2026 through Web Commerce Communications Limited. The site resolves to Cloudflare infrastructure, using the nameservers beau.ns.cloudflare.com and marjory.ns.cloudflare.com and presents Cloudflare Browser Insights and HTTP/3 support. The HTTP response is 200 and the page title returned is “CraxSRAT | Honest Overview”. The domain has a Gridinsoft trust score of 0/100, indicating an extremely low reputation. VirusTotal reports nine of ninety‑three scanners flag the domain, reinforcing the suspicion of malicious activity. Current threat intelligence classifies the site as a generic_phishing host, and it is listed on one public blocklist and is actively blocked by the PhishDestroy filtering service. Analysis indicates the infrastructure is typical of short‑lived phishing sites that rely on Cloudflare for anonymity and performance. No additional content, payload, or credential‑harvesting mechanisms have been publicly disclosed, leaving the exact phishing vector uncertain. Defenders should block the domain at perimeter and DNS layers, monitor for any outbound connections to the associated Cloudflare IP ranges, and continue to track the domain’s reputation on threat‑intel feeds. Because the site remains active, ongoing observation is recommended.