kra47cc[.]disneyland39[.]ru
“kra47 - AT гид по фестивалям и событиям”
kra47cc.disneyland39.ru — Contenido no disponible. Tipo de estafa: Generic Phishing. Resumen de las pruebas: VirusTotal 9/95 (ADMINUSLabs, alphaMountain.ai, CyRadar, Fortinet, Google Safebrowsing); Google Safe Browsing flagged; PhishDestroy score 80/100. Registrador: REGRU-RU.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
The domain kra47cc.disneyland39.ru poses a phishing threat, primarily through potential brand impersonation tactics. This domain's activities are designed to deceive users into providing sensitive information under the guise of legitimate festival and event guides. The page title suggests a focus on cultural events, which may be used as a lure for unsuspecting individuals seeking such information. The absence of an SSL certificate further raises concerns about the security and authenticity of the site, making it susceptible to interception by malicious actors.
Technical analysis reveals several key indicators that contribute to the elevated risk level associated with this domain. VirusTotal shows 9 out of 95 security vendors have flagged this domain, indicating significant consensus on its threat potential. Registered through REGRU-RU, the domain was created on December 24, 2024, suggesting relatively recent establishment, which is often characteristic of domains involved in transient phishing campaigns. Currently, this domain appears on one security blocklist, specifically flagged by PhishDestroy, and it resolves to an IP located in Sweden under AS42237 (w1n ltd). Google Safe Browsing has also flagged it for phishing, reinforcing the concerns regarding its malicious intent.
Users who have visited kra47cc.disneyland39.ru should take immediate precautions to protect their personal information. It is advisable to conduct a thorough review of any interactions with the site, including the examination of login credentials or personal data that may have been entered. Passwords associated with accounts used on the site should be changed promptly, and users should enable additional security measures such as two-factor authentication where possible. Monitoring for unusual activity on financial accounts linked to the visited site is also recommended, as phishing domains often aim to extract such sensitive details. If any suspicious activity is detected, affected users should report the incident to their financial institution or relevant authorities to mitigate potential damage.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Análisis de VirusTotal
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.