crowdcreateytr[.]cc

Analysis of crowdcreateytr.cc shows a high‑risk generic phishing infrastructure that was taken offline prior to the report date of July 23, 2026. The domain was registered on February 21, 2026 through Gname.com Pte. Ltd. and is hosted behind Cloudflare, resolving to IP 104.18.21.48 located in Canada. DNS resolution is provided by a2.share-dns.com and b2.share-dns.net, a common pair used by disposable or fast‑flux domains. Google Safe Browsing flags the site for social engineering, and Gridinsoft assigns a trust score of 0 out of 100, indicating a lack of legitimacy.

VirusTotal scans show 11 of 93 security vendors raise alerts against the domain, confirming malicious intent. The page title returned by the server is the literal domain name, crowdcreateytr.cc, with no additional branding or content visible in the limited data set. The domain appears on one public security blocklist and is actively blocked by the PhishDestroy feed, further corroborating its abusive nature.

No SSL certificate details, HTTP status codes, or content snapshots are available, leaving the exact phishing payload or credential‑harvesting method unconfirmed. Defenders should continue to block the domain at network perimeters and endpoint security layers, monitor for any re‑use of the associated IP address or name‑server pair, and update threat‑intel feeds with the observed indicators. Ongoing vigilance is advised, as the infrastructure could be repurposed under a new domain or sub‑domain despite the current offline status.