kra46-at[.]club-barin[.]ru

Analysis of the domain kra46-at.club-barin.ru indicates it is associated with elevated-risk phishing activity targeting private event services. The domain was registered on December 7, 2024, through REGRU-RU, a registrar frequently observed in fraudulent infrastructure. It resolves to the IP address 193.105.134.30, hosted under AS42237 (w1n ltd) in Sweden. At the time of assessment, the domain was offline, though prior scans revealed a page title of 'kra46 - AT пространство для частных мероприятий,' suggesting a focus on private event services in Russian-language markets.

Security vendor detection on VirusTotal flags the domain as malicious, with 9 of 95 engines identifying it as a threat. The domain appears on at least one security blocklist and is blocked by PhishDestroy. No SSL certificate was present, further reducing its legitimacy. Nameservers ns1.regerey.com and ns2.regerey.com are linked to the same registrar, reinforcing centralized control over the domain's infrastructure.

GridinSoft assigns a trust score of 0/100, aligning with its classification as a high-risk entity. While the exact content of the phishing page remains unconfirmed due to its offline status, the combination of registrar reputation, hosting provider, detection counts, and blocklist presence supports its classification as a phishing domain. Defenders should treat this domain as malicious and prioritize blocking it at the DNS or network level. Organizations targeting Russian-speaking users or private event services should monitor for similar domains registered through REGRU-RU or resolving to the same IP range.