kra46[.]clubarabia[.]ru

The domain kra46.clubarabia.ru is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, kra46.clubarabia.ru has been taken offline, reducing immediate risk but not eliminating potential residual threats.

Technical indicators confirm kra46.clubarabia.ru as a low-detection but active phishing threat. Only 1 of 95 VirusTotal security vendors flagged the domain, and it appears on a single security blocklist (PhishDestroy). The domain was registered through REGRU-RU on March 06, 2025, and resolves to the IP address 193.105.134.30, hosted by AS42237 (w1n ltd) in Sweden. No SSL certificate was issued, and the observed page title was 'KRAB - Защищённый доступ'. The domain uses nameservers ns1.regerey.com and ns2.regerey.com, with a Gridinsoft trust score of 0/100.

Users who interacted with kra46.clubarabia.ru should assume their credentials or sensitive data may be compromised. Immediately change passwords for any accounts accessed after visiting the site, enable two-factor authentication (2FA), and monitor accounts for unauthorized activity. Report the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in broader threat mitigation. If financial or cryptocurrency details were entered, contact relevant institutions to secure accounts and revoke any unauthorized transactions.