kra-43-cc-site[.]ru

This domain, kra-43-cc-site.ru, was registered on November 19, 2025, through REGRU-RU and is currently offline. Analysis indicates it was flagged as a high-risk phishing site targeting users with a minimalist portal theme, as suggested by the page title 'Kra43 — минимализм, порядок и гармония CC версия.' Google Safe Browsing classified the domain under social engineering, reinforcing its malicious intent. The domain resolved to IP 193.105.134.21, hosted by AS42237 (w1n ltd) in Sweden, with nameservers ns1.reg.ru and ns2.reg.ru. No SSL certificate was detected, which is atypical for legitimate sites and increases the risk of unencrypted data interception.

Security vendors flagged the domain on VirusTotal, with 14 out of 95 engines detecting malicious activity, though the specific nature of the threat remains unconfirmed beyond generic phishing. The domain appears on at least one security blocklist, including PhishDestroy. Gridinsoft assigned a trust score of 0/100, further corroborating its high-risk classification.

Defenders should treat this domain as compromised infrastructure and prioritize blocking it at the DNS and network levels. Given its offline status, monitoring for reactivation or related domains using similar naming conventions (e.g., 'kra-43' or 'cc-site') is recommended. No evidence links the domain to a specific phishing kit or targeted brand beyond the page title reference, so additional forensic analysis may be required if the site resurfaces.