1cobaltlab[.]org

The domain 1cobaltlab.org is a generic phishing site that was active until recently. It posed an elevated risk by attempting to deceive users into disclosing sensitive information without impersonating a specific brand or deploying a known drainer kit. As of the latest verification, 1cobaltlab.org has been taken offline, though it was previously accessible and flagged by security vendors.

Technical indicators confirm the domain's suspicious nature. 1cobaltlab.org was detected by 2 of 95 VirusTotal security vendors, including Fortinet and SOCRadar. It was registered through NiceNIC International Group Co., Limited on February 21, 2026, and resolved to the IP address 104.21.17.60, hosted on Cloudflare's network (AS13335). The domain appeared on one security blocklist, PhishDestroy, and lacked an SSL certificate. The observed page title referenced 'Cobalt Lab - Официальный #1 проект по открытию кейсов Rust :: cobaltlab.tech,' suggesting a focus on Russian-speaking users.

Users who interacted with 1cobaltlab.org should take immediate safety steps. If login credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Monitor accounts for unauthorized activity and report any suspected fraud to financial institutions. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. Victims may also file complaints with the registrar, NiceNIC International Group Co., Limited, to aid in further investigation.