kra46cc[.]dvschool[.]ru

The domain kra46cc.dvschool.ru is a generic phishing site designed to deceive users into disclosing sensitive information through social engineering tactics. It does not impersonate a specific brand or deploy a known crypto drainer kit. As of the latest verification, kra46cc.dvschool.ru has been taken offline, but it previously posed an elevated risk of credential theft or other fraudulent activity.

Technical analysis of kra46cc.dvschool.ru reveals limited but clear indicators of malicious intent. The domain was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and was listed on Google Safe Browsing for 'SOCIAL_ENGINEERING' phishing. It appeared on 1 security blocklist (PhishDestroy) and was registered through REGRU-RU on December 06, 2024. The site resolved to IP address 193.105.134.30, hosted by AS42237 (w1n ltd) in Sweden, with no SSL certificate issued. The observed page title was 'kra46 - динамичная AT школа цифровых навыков', and it used nameservers ns1.regerey.com and ns2.regerey.com. Gridinsoft assigned the domain a trust score of 0/100.

Users who may have interacted with kra46cc.dvschool.ru should take immediate steps to secure their accounts. Change passwords for any services accessed while the site was active, enable two-factor authentication (2FA) where available, and monitor accounts for unauthorized activity. Report the phishing domain to Google Safe Browsing, your local cybersecurity authority, or platforms like PhishTank to aid in broader threat mitigation. If financial or crypto services were involved, review transaction histories and consider revoking any suspicious token approvals.