kra47-cc[.]jugsool[.]ru
“kra47 - воплощает муниципалитет СС уровня”
kra47-cc.jugsool.ru — Konten tidak tersedia. Ringkasan bukti: VirusTotal 15/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); Google Safe Browsing flagged; PhishDestroy score 95/100. Registrar: REGRU-RU.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of kra47-cc.jugsool.ru, observed as offline as of July 23 2026, shows a recent registration (created August 19 2025) through the REGRU‑RU registrar. The domain resolves to 193.105.134.22, an address announced by AS42237 (w1n ltd) and geolocated in Sweden. Nameserver records point to ns1.cloudflanre.com and ns2.cloudflanre.com, indicating the use of a third‑party DNS service. No TLS certificate is presented, meaning the site was served over HTTP only.
The page title returned by the server is “kra47 - воплощает муниципалитет СС уровня”, which does not reveal a targeted brand and suggests a generic municipal‑level phishing lure. Reputation metrics are uniformly negative: Gridinsoft assigns a trust score of 0 / 100, Google Safe Browsing flags the URL as social engineering, and the domain appears on one external blocklist while being actively blocked by PhishDestroy. VirusTotal reports 15 detections out of 95 scanned engines, confirming that multiple security products consider the site malicious. The cumulative evidence justifies a high‑risk rating.
Uncertainties remain regarding the specific credential‑stealing mechanisms and any payload delivered, as no content or malware analysis is available. Defenders should add 193.105.134.22 and the associated hostnames to URL filtering and DNS sinkhole rules, enforce HTTPS‑only policies to block fallback to HTTP, and monitor for any re‑registration of the domain or its variants. Continuous re‑scanning of the IP address and the cloudflanre nameservers is recommended, as the infrastructure could be repurposed for further campaigns. Incident response teams may also consider notifying the REGRU‑RU registrar of the abuse to expedite takedown if the domain resurfaces.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive