www-kra47-cc[.]ru

As of July 12, 2026, the domain www-kra47-cc.ru has been identified as a high-risk phishing site. The domain was registered on November 23, 2025, through the registrar DOMENUS-RU. Analysis indicates that the domain is actively being used for phishing activities, as evidenced by its presence in 23 threat intelligence pulses on AlienVault OTX and its inclusion in two security blocklists, PhishDestroy and BLP-Malware. The page title, 'Kra47cc Авторизация на сайте,' suggests that the site is designed to mimic a legitimate authorization page, potentially to deceive users into providing sensitive information such as login credentials or personal data. The domain resolves to the IP address 198.251.89.30, and it is protected by a Let's Encrypt SSL certificate, which may give users a false sense of security. Gridinsoft's trust score of 0/100 further corroborates the high risk associated with this domain. While the exact content and target of the phishing campaign have not been fully analyzed, the combination of the domain's recent creation, low trust score, and active presence in multiple threat intelligence sources strongly suggests that it is a phishing site. Defenders should take immediate action to block this domain and educate users about the risks of visiting unauthorized or suspicious websites. Additionally, network administrators should monitor for any connections to this IP address and consider implementing additional security measures to prevent data breaches or unauthorized access.