ragnacook[.]site

Analysis of ragnacook.site shows a high‑risk generic phishing operation that remains active as of July 27, 2026. The domain was registered on January 08, 2026 through Atak Domain Bilgi Teknolojileri A.Ş. and resolves to the IPv4 address 75.2.60.5, which is served by Cloudflare's infrastructure as indicated by the authoritative nameservers jimmy.ns.cloudflare.com and tori.ns.cloudflare.com. VirusTotal reports that 19 of 91 security vendors have flagged the domain, demonstrating a strong consensus of malicious behavior across independent scanning engines.

The domain is currently listed on one public security blocklist and has been explicitly blocked by the PhishDestroy feed, reinforcing its classification as a phishing resource. No additional metadata such as page title, SSL certificate details, or HTTP response codes are available, so the exact content of the site cannot be described at this time. Defenders should treat traffic to ragnacook.site as hostile, enforce network‑level blocking, and ensure endpoint protection solutions incorporate the latest blocklist entries.

Continuous monitoring of the IP address 75.2.60.5 for ancillary malicious activity is recommended, as Cloudflare‑hosted domains can be repurposed rapidly. Organizations using email filtering should add the domain to deny lists and consider supplemental URL reputation checks to prevent credential harvesting attempts. The combination of recent registration, multiple vendor detections, and active blocklist inclusion indicates a persistent threat that warrants immediate remediation.