kra46cc[.]ikra-bryut-ustritsy[.]ru

The domain kra46cc.ikra-bryut-ustritsy.ru is identified as a generic_phishing site and is currently offline. This domain impersonates no specific brand but poses an elevated risk to users who may inadvertently access it. The site was designed to deceive users into providing sensitive information under the guise of a secure access portal, as indicated by the page title 'KRAB - Защищённый доступ'.

Analysis indicates that the domain kra46cc.ikra-bryut-ustritsy.ru was flagged by 9 out of 95 security vendors on VirusTotal, suggesting that a significant portion of the security community has identified it as a threat. The domain was registered through REGRU-RU and is associated with the IP address 193.105.134.30, located in Sweden (SE) and managed by AS42237 w1n ltd. The domain was created on March 06, 2025, and has been listed on one security blocklist, further emphasizing its malicious nature. Google Safe Browsing also flags this domain as a phishing site, adding to the credibility of the threat assessment. Notably, the domain lacks an SSL certificate, which is often a red flag for phishing sites as it indicates a lack of secure, encrypted communication.

The current status of the domain is offline, which reduces the immediate risk to users. However, it is crucial to remain vigilant as phishing sites can be quickly reactivated. Security teams and users are advised to block this domain at the network level and educate employees and users about the signs of phishing, such as the absence of SSL certificates and suspicious page titles. Additionally, regular updates to security software and periodic checks on domain blocklists can help in maintaining a secure environment.