kra46[.]penamat[.]ru

The domain kra46.penamat.ru is associated with a generic phishing operation. It poses a risk by potentially tricking visitors into divulging sensitive information. The domain has an elevated risk level and is currently taken offline, which means it is not actively serving content. However, it is advisable to remain cautious as it may become active again.

kra46.penamat.ru was registered through REGRU-RU on March 07, 2025. The domain resolves to the IP address 193.105.134.30, which is located in SE under the AS42237 w1n ltd. It has been flagged by 1 of 95 security vendors on VirusTotal, including SOCRadar, and appears on 1 security blocklist, specifically PhishDestroy. The domain does not have an SSL certificate, and the page title observed was 'KRAB - Защищённый доступ'.

If a user has interacted with kra46.penamat.ru, they should take immediate steps to protect their information. For generic phishing, users should change their passwords, enable two-factor authentication, and monitor their accounts for any unauthorized activity. Additionally, users should report the domain to their security provider and to Google Safe Browsing to help prevent further phishing attacks. The nameservers for this domain are ns1.regerey.com and ns2.regerey.com, which can be useful for additional investigation and tracking.