kra46-cc[.]restorlux[.]ru

This domain, kra46-cc.restorlux.ru, poses a specific threat of generic phishing. The domain is designed to deceive users into providing sensitive information, such as login credentials or financial data, by mimicking legitimate websites or brands. Analysis indicates that the domain has been flagged by 12 out of 95 security vendors on VirusTotal, suggesting a moderate level of threat recognition within the cybersecurity community.

Infrastructure analysis reveals that kra46-cc.restorlux.ru was created on December 07, 2024, and is registered through REGRU-RU. The domain resolves to the IP address 193.105.134.30, which is located in Sweden (AS42237 w1n ltd). The domain lacks an SSL certificate, which is a common indicator of a non-secure and potentially malicious site. Additionally, the domain appears on one security blocklist, specifically PhishDestroy, further corroborating its association with phishing activities.

If users have visited kra46-cc.restorlux.ru, they should immediately check their accounts for any unauthorized activity and consider changing their passwords. It is also recommended to monitor financial statements for any suspicious transactions and to run a comprehensive security scan on their devices to ensure they have not been compromised. Users should avoid clicking on links or downloading files from any emails or messages that direct them to this domain.