krab1at[.]zamerproff[.]ru
“krab1 - AT производство строп для промышленности УрФО”
krab1at.zamerproff.ru — Konten tidak tersedia. Ringkasan bukti: VirusTotal 8/95 (alphaMountain.ai, CRDF, ESET, Fortinet, Google Safebrowsing); Google Safe Browsing flagged; PhishDestroy score 80/100. Registrar: REGRU-RU.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain krab1at.zamerproff.ru was registered on August 02, 2025 through the REGRU-RU registrar and is currently taken offline. DNS resolution points to the IPv4 address 193.105.134.30, which belongs to AS42237 w1n ltd and is geolocated in Sweden. The authoritative name servers are ns1.regerey.com and ns2.regerey.com. No TLS certificate is presented for the host, indicating that the site operated without HTTPS protection. The page title observed during the brief analysis reads "krab1 - AT производство строп для промышленности УрФО," suggesting the site attempted to pose as a Russian industrial rope‑manufacturing entity.
Google Safe Browsing classifies the URL as a social engineering threat, and the domain is listed on a single security blocklist. PhishDestroy has also flagged the domain as malicious. Gridinsoft assigns a trust score of 0 out of 100, reflecting a high confidence in its malicious nature. VirusTotal reports that eight of ninety‑five scanned security vendors identified the domain as malicious, providing independent confirmation of its threat profile.
The evidence indicates a generic phishing campaign targeting users with a fabricated industrial service front. Uncertainty remains regarding the specific phishing kit or payload used, as no further content analysis is available. Defenders should ensure the domain and its associated IP address are blocked at network perimeter devices, update URL filtering feeds with the observed indicators, and monitor the registrar and name server infrastructure for any re‑registration attempts. Continuous observation of the AS42237 block for related activity is recommended, as adversaries may reuse the hosting environment for future campaigns.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive