kra-forty-six-cc[.]ru

PhishDestroy identifies the domain kra-forty-six-cc.ru as an active generic phishing site currently under investigation. No final classification has been assigned, but the domain exhibits behavior consistent with credential harvesting campaigns. The fraudulent infrastructure remains online as of the latest scan cycle.

The domain kra-forty-six-cc.ru was flagged by 0 of 95 VirusTotal vendors at the time of analysis, indicating zero antivirus detections. This site is registered through REGRU-RU and resolves to the IP address 104.21.51.69. The domain was created on December 10, 2025, and holds an SSL certificate issued by Google Trust Services, which may increase user trust perception. As of now, no known blocklists include this domain, and trust scores across threat intelligence platforms remain neutral.

The status of kra-fortry-six-cc.ru is currently active and under investigation. Users should immediately block access to this domain at both the network and endpoint levels. Enterprises are advised to update firewall rules, DNS blocklists, and endpoint protection platforms to deny connections to 104.21.51.69 and kra-forty-six-cc.ru. End users should avoid any interaction with this domain, including clicking links or entering credentials. Security teams should monitor for any outbound connections to this IP or domain from internal assets and initiate incident response procedures if such activity is detected.