krak44-at[.]ru

This report analyzes the domain krak44-at.ru, which presents itself as “Kra44 — минималистичные фигурки и декоративные предметы AT версия,” suggesting a website selling minimalist figurines and decorative items. Despite this benign description, the site poses a confirmed security threat, as indicated by multiple security vendors flagging it as malicious. The exact nature of the threat, such as malware distribution or phishing, is not specified in the available data, but the high detection rate and low trust score strongly indicate active malicious activity.

Technical analysis shows the domain was flagged by 8 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, CyRadar, Fortinet, and Gridinsoft. It is listed on one blocklist. The domain was created on 2025-11-22 and registered with REGRU-RU. The IP address is 193.105.134.21, hosted in Sweden by AS42237 w1n ltd. The domain has no SSL certificate, and its nameservers are ns1.reg.ru and ns2.reg.ru.

The site is currently offline and down. Despite this, the risk level is high due to the 8/95 detection rate and a GridinSoft trust score of 0 out of 100. Users should avoid any interaction with this domain, as it has been widely identified as a threat.