kakr[.]cc

Analysis of kakr.cc, observed as offline as of July 24 2026, indicates a high‑risk phishing infrastructure. The domain was registered on 21 February 2026 through NiceNIC International Group Co., Limited and immediately pointed to the Cloudflare network (AS13335). DNS resolution returns the address 188.114.96.3, hosted in the United States, and the authoritative nameservers are cash.ns.cloudflare.com and kara.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. The TLS certificate presented is issued by SSL Corporation under the Cloudflare TLS Issuing ECC CA 3 chain, a standard Cloudflare‑provided certificate, which does not mitigate the underlying malicious intent. Content‑level evidence is limited to the page title “Калькулятор К - рассчитывайте и маскируйте онлайн”, a Russian‑language phrase describing an online calculator.

No additional page content has been captured, so the exact phishing lure cannot be confirmed beyond the generic classification. However, the domain is flagged by five of ninety‑three VirusTotal scanners, indicating that multiple security vendors have identified malicious characteristics. The Gridinsoft trust score of 0 out of 100 further reflects a reputation of extreme distrust. Infrastructure telemetry shows the presence of Yandex.Metrika analytics and HTTP/3 support, both commonly found on legitimate sites but also frequently leveraged by threat actors to blend into normal traffic patterns.

The domain appears on a single external blocklist and has been actively blocked by the PhishDestroy service, confirming that at least one anti‑phishing feed has recognized it as malicious. Given the combination of a recent registration, Cloudflare front‑end hosting, low trust scores, multiple vendor detections, and confirmation by an established phishing blocklist, defenders should treat kakr.cc as a confirmed phishing vector.