kra------40cc[.]ru
“kra45 - онлайн-школа CC программирования с индивидуальным подходом”
kra------40cc.ru — Konten tidak tersedia. Ringkasan bukti: VirusTotal 12/95 (alphaMountain.ai, Bfore.Ai PreCrime, BitDefender, CRDF, CyRadar); PhishDestroy score 86/100. Registrar: UK-WIN (ASN: 42237).
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of kra------40cc.ru shows a domain that was actively hosting a generic phishing page titled "kra45 - онлайн-школа CC программирования с индивидуальным подходом" before being taken offline. Twelve of ninety‑five VirusTotal scanners flagged the domain, indicating a moderate level of detection across multiple security vendors. The site received a Gridinsoft trust score of zero out of one hundred, reinforcing the conclusion that it is untrusted. No TLS certificate was observed, meaning communications were unencrypted and vulnerable to interception.
Registration was performed through the UK‑WIN registrar, associated with ASN 42237, and the domain resolves to the IP address 193.105.134.30, which is allocated to a Swedish hosting provider (AS42237 w1n ltd). The IP address appears on a single security blocklist and the domain itself has been blocked by the PhishDestroy mitigation service. Current status is offline, preventing immediate interaction, but the historical evidence suggests the infrastructure was deliberately used for phishing.
Defenders should continue to block the domain at perimeter defenses, monitor DNS queries for the associated IP, and add the IP to internal blocklists. Because the site is no longer reachable, any ongoing campaigns would need to shift to new infrastructure; however, the registrar and hosting details provide a potential attribution vector for threat‑hunting activities. Continuous observation of UK‑WIN registrations and the AS42237 network is advised to detect similar future deployments.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive