kra46[.]med-zdorovie[.]ru

Analysis of the domain kra46.med-zdorovie.ru shows it was created on 10 December 2024 through the REGRU-RU registrar and resolves to IP address 193.105.134.30, which belongs to AS42237 w1n ltd based in Sweden. The domain is hosted on nameservers ns1.armadns.icu and ns2.armadns.icu and does not present an SSL certificate, indicating that any data transmitted would be unencrypted. The page title retrieved from the site reads "kra46 - ваш AT проводник в мир здоровья," suggesting a health‑related theme, but no specific brand or service is identified in the available evidence. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist.

It is also listed as blocked by PhishDestroy. Google Safe Browsing flags the site for social engineering, and VirusTotal reports that 13 of 95 scanning engines have flagged the domain as malicious. The current operational status is offline, which may indicate the site has been taken down or is temporarily unavailable. Defenders should continue to monitor the associated IP address for any re‑hosting activity, enforce blocklists that include this domain, and consider adding the domain to internal URL filtering rules.

Network traffic to the IP should be inspected for potential command‑and‑control or data exfiltration attempts, even though the site is presently inactive. Because the site lacks TLS, any future activation would expose users to credential capture or malware delivery without encryption. Continuous observation of the registrar and nameserver infrastructure is advised to detect any rapid changes that could precede a re‑launch.