kra47-at[.]delfinium[.]ru

This domain, kra47-at.delfinium.ru, is flagged as a generic_phishing threat. It was taken offline, but its previous content suggested involvement in fraudulent activities, potentially targeting users with phishing scams to steal sensitive information.

Infrastructure analysis reveals that the domain was registered through REGRU-RU on February 08, 2025. It resolves to the IP address 193.105.134.30, which is located in Sweden and associated with the AS42237 w1n ltd. The domain appears on 1 security blocklist and has been flagged by 9 out of 95 security vendors on VirusTotal. There is no SSL certificate associated with the domain, which is a common indicator of a lack of security and potential phishing activity. The page title, 'kra47 - химическая CC лаборатория по производству метанола,' suggests a misleading front, possibly to disguise the true nature of the phishing operation.

If users have visited kra47-at.delfinium.ru, they should take immediate steps to ensure their security. This includes changing passwords for any accounts that may have been compromised, monitoring financial statements and credit reports for any unusual activity, and running a comprehensive security scan on their devices. Additionally, users should remain vigilant and report any further phishing attempts to their respective security teams or local authorities.