kra46[.]uraloppl[.]ru

This domain kra46.uraloppl.ru was observed hosting a page titled “kra46 - платформа для AT оптимизации производственных процессов”. The site is currently offline. Registration information shows the domain was created on 11 December 2024 via the REGRU‑RU registrar. DNS resolves to 193.105.134.30, which belongs to AS42237 owned by w1n ltd and is geolocated in Sweden. The authoritative name servers are ns1.armadns.icu and ns2.armadns.icu.

No TLS certificate is presented for the host, indicating HTTP‑only service when it was active. On 24 July 2026 the domain is listed as a generic phishing infrastructure with an elevated risk rating. VirusTotal analysis recorded a single positive detection out of 95 scanned engines. The domain appears on one public blocklist and has been flagged by PhishDestroy. Independent trust scoring from Gridinsoft rates the domain at 0 / 100.

These data points collectively suggest the domain was used for phishing, although the exact payload or targeted brand cannot be confirmed from the available evidence. The lack of SSL, the recent creation date, and the single vendor detection are typical of short‑lived malicious sites. Defenders should continue to block the domain at network perimeter and DNS filtering layers, monitor for any resurgence of the IP address 193.105.134.30, and consider adding the host to internal threat‑intel feeds. Because the site is offline, active exploitation cannot be verified, but the historical indicators warrant continued vigilance.