get[.]kra----36----cc[.]ru
“get.kra----36----cc.ru”
get.kra----36----cc.ru — Contenido no disponible. Resumen de las pruebas: VirusTotal 15/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); Google Safe Browsing flagged; PhishDestroy score 95/100. Registrador: REGRU-RU.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
Analysis indicates that the domain get.kra----36----cc.ru was registered on July 27, 2025 through the REGRU-RU registrar and is currently taken offline. The site presented a page title identical to the domain name and did not serve an SSL certificate, exposing all traffic to interception. Infrastructure inspection shows the domain resolves to IP address 193.105.134.30, which is allocated to AS42237 w1n ltd in Sweden. The hosting nameservers are ns1.regerey.com and ns2.regerey.com.
Google Safe Browsing has flagged the URL for social engineering, and the domain appears on one public security blocklist. VirusTotal reports that 15 of 95 scanned security vendors flagged the domain as malicious, reinforcing the suspicion of a phishing operation. Gridinsoft assigned a trust score of 0 out of 100, and PhishDestroy has listed the site as blocked.
While the site is presently offline, the observed indicators suggest a high‑risk generic phishing campaign that could be re‑hosted or resurrected by the actors. Defenders should add the domain and its resolving IP to outbound and inbound blocklists, monitor the associated nameservers for any future changes, and ensure that any internal URL filtering solutions incorporate the Google Safe Browsing and VirusTotal findings. Continuous observation of the IP range owned by AS42237 is advised, as related infrastructure may be leveraged for subsequent malicious deployments.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Captura guardada
Inteligencia de dominios
Detalles técnicosDNS, SAN de SSL, marcas de tiempo
Análisis de VirusTotal
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.