kra46-cc[.]palatan6[.]ru

This domain is flagged as a credential harvesting phishing site targeting users through deceptive design service themes. The page title, 'kra46 - пространство комфорта и стиля CC дизайна,' suggests an attempt to impersonate a legitimate interior or graphic design platform, likely to trick visitors into entering sensitive login credentials or financial information. Phishing sites of this nature often employ social engineering tactics, such as fake login portals or payment forms, to exfiltrate user data to attacker-controlled servers. The domain’s infrastructure and content are designed to appear authentic, increasing the likelihood of successful compromise for unsuspecting victims. Analysis indicates this domain is malicious based on multiple technical indicators. VirusTotal reports that 12 out of 95 security vendors have detected the domain as malicious, a significant ratio for a newly registered site. The domain was created on December 1, 2024, and is registered through REGRU-RU, a registrar frequently associated with abusive domains. It resolves to the IP address 193.105.134.30, which has been linked to other phishing campaigns in recent months. Additionally, the domain appears on one security blocklist, further confirming its malicious classification. The combination of a recent creation date, low trust scores, and vendor detections strongly suggests this is not a legitimate service. If a user has visited kra46-cc.palatan6.ru, immediate action is required to mitigate potential compromise. First, disconnect the device from the network to prevent further data exfiltration. Scan the system using updated antivirus or endpoint detection tools to identify and remove any malware or scripts introduced by the site. Reset all credentials entered on the site, prioritizing email, banking, and other high-value accounts, using a separate, secure device. Monitor financial statements and account activity for unauthorized transactions. Users should also report the domain to their organization’s security team or a relevant threat intelligence platform to aid in broader mitigation efforts. If sensitive data was submitted, consider enabling additional security measures such as multi-factor authentication and credit monitoring.