kra46cc[.]glavbuh-press[.]ru

The domain kra46cc.glavbuh-press.ru was registered on December 06, 2024 through the REGRU-RU registrar and uses the nameservers ns1.regerey.com and ns2.regerey.com. It resolves to the IPv4 address 193.105.134.30, which belongs to the autonomous system AS42237 operated by w1n ltd in Sweden. No SSL certificate is presented for the host, indicating that traffic is unencrypted. The observed page title, "kra46 - эксперт в сфере AT бухгалтерских технологий," suggests an attempt to pose as a specialist in accounting technology, but no further content analysis is available because the site is currently taken offline.

Reputation services provide a Gridinsoft trust score of 0 out of 100, reflecting an extremely low level of trust. VirusTotal scans show that eight of ninety‑five security vendors flagged the domain, and the host appears on a single security blocklist. Additionally, the phishing‑specific blocklist PhishDestroy has already listed the domain as malicious.

The combination of a recent registration, low trust score, multiple vendor detections, and blocklist entries aligns with the classification of a generic phishing campaign. Defenders should continue to block traffic to this domain at perimeter defenses, update URL filtering rules, and monitor any historical DNS queries for the 193.105.134.30 address. Because the site is offline, active exploitation cannot be confirmed, but the existing indicators warrant ongoing vigilance and inclusion of the domain in threat intelligence feeds.