kra46cc[.]eg65[.]ru

The domain kra46cc.eg65.ru was created on December 05, 2024 and is registered through REGRU-RU. It resolves to the IPv4 address 193.105.134.30, which is geolocated to Sweden and belongs to AS42237 w1n ltd. The authoritative nameservers are ns1.regerey.com and ns2.regerey.com. No TLS certificate is presented for the host, indicating that the site operates over plain HTTP only.

The page title returned from the site is "kra46 - AT лаборатория электронной коммерции", which references a Russian e‑commerce laboratory but provides no additional context about the content served. The domain is currently listed as offline, and PhishDestroy has taken it down. It appears on a single security blocklist and carries a Gridinsoft trust score of 0 out of 100, reflecting a highly suspicious reputation. VirusTotal analysis shows that 11 of 95 scanning engines flagged the domain, confirming malicious activity.

The combined evidence—registration details, lack of encryption, low trust score, multiple vendor detections, and blocklist presence—supports classification as a generic phishing infrastructure. Defenders should ensure that the domain is added to DNS and URL filtering policies, block the associated IP address, and monitor for any new domains that reuse the same nameserver set or originate from the same ASN. Continuous surveillance of traffic to 193.105.134.30 is advised, as threat actors often repurpose compromised hosting resources. Organizations should also audit outbound connections for attempts to resolve or contact this domain, even though it is currently offline, to detect any lingering malicious campaigns that may have cached the URL.