kra46cc[.]tc-otvozim[.]ru

The domain kra46cc.tc-otvozim.ru was registered on 7 December 2024 through the REGRU‑RU registrar. DNS resolution points to the IPv4 address 193.105.134.30, which belongs to Autonomous System AS42237 operated by w1n ltd in Sweden. The domain uses the nameservers ns1.regerey.com and ns2.regerey.com, both of which resolve to the same hosting infrastructure. No TLS certificate is presented, indicating that the site was served over plain HTTP at the time of observation. The only publicly visible content is the page title “kra46 - ваш надёжный CC партнёр в утилизации отходов”, which translates to “kra46 – your reliable CC partner in waste disposal”.

This title suggests a possible focus on credit‑card related services, but no further page content has been captured. VirusTotal has recorded detections from seven of ninety‑five scanning engines, confirming that multiple security products classify the domain as malicious. The domain is listed on a single external blocklist and has been actively blocked by the PhishDestroy service. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment.

The site is currently offline, which limits real‑time analysis of HTTP responses or payloads. Given the combination of a recent registration, a low‑reputation hosting provider, absence of encryption, and multiple vendor detections, the domain should be treated as a high‑confidence phishing indicator. Defenders should add the hostname to inbound and outbound filtering rules, ensure that any traffic to the associated IP address is blocked, and monitor for future DNS resolutions that may point to the same nameservers or AS. Continuous re‑evaluation is advised in case the domain is re‑activated or the underlying infrastructure is reused for additional campaigns.