login[.]kra-----40-cc[.]ru

The domain login.kra40cc.ru has been identified as a platform for credential phishing, posing a significant risk to users who may inadvertently provide sensitive information such as usernames and passwords. Analysis indicates that the domain is designed to mimic legitimate login pages, potentially targeting individuals or organizations involved in advertising or professional services, as suggested by the page title 'kra45 - эталон профессионализма AT в рекламном проектировании'.

This domain is flagged by 10 out of 95 security vendors on VirusTotal, indicating a moderate level of consensus regarding its malicious nature. The domain was registered through UK-WIN (ASN: 42237), and its IP address, 193.105.134.30, is located in Sweden (SE) under the AS42237 w1n ltd. The domain appears on one security blocklist and is currently offline. The lack of an SSL certificate further suggests that the domain is not a legitimate, secure website and is likely used for malicious purposes.

If users have visited login.kra40cc.ru, they should immediately change passwords for any accounts that may have been compromised and enable two-factor authentication where available. Users are advised to monitor their accounts for any unusual activity and report the incident to their security teams or IT departments. Additionally, users should be cautious of similar domains and verify the legitimacy of login pages before entering any credentials.