cradun[.]com

Analysis as of July 29 2026 indicates that the domain cradun.com is actively used in a generic phishing campaign. The domain resolves to the IP address 104.21.87.65, which is hosted behind Cloudflare's network. Registration data shows the domain was created on April 13 2026 and the registrar listed is Cloudflare, Inc. The authoritative name servers are grant.ns.cloudflare.com and maeve.ns.cloudflare.com, confirming the use of Cloudflare’s DNS infrastructure.

VirusTotal has processed the domain with 91 scanning engines; none reported a detection, but the lack of a positive result does not constitute evidence of benign behavior. The domain is currently listed on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, indicating that at least one reputable anti‑phishing service has identified it as malicious. No additional public intelligence such as Safe Browsing verdicts, OTX mentions, SSL certificate details, HTTP response codes, or page title information is available at this time.

Consequently, the confidence in the phishing classification rests on the observed resolution to a Cloudflare‑protected IP, the recent creation date, and the presence on a known blocklist. Defenders should add cradun.com to URL filtering policies, monitor DNS queries for the associated name servers, and consider network‑level blocking of the resolved IP address. Continuous re‑evaluation is recommended as further telemetry becomes available, particularly any future VirusTotal detections, changes in blocklist status, or emergence of content‑level indicators.