kra46at[.]ds176[.]ru

This domain, kra46at.ds176.ru, was observed hosting a generic phishing page titled "kra46 - AT‑школа будущего для ваших детей". The site was registered on 5 December 2024 through the REGRU‑RU registrar and is hosted on IP 193.105.134.30, which belongs to AS42237 (w1n ltd) and resolves to a location in Sweden. No TLS certificate is presented, leaving the HTTP service unencrypted. Nameserver delegation points to ns1.regerey.com and ns2.regerey.com.

Reputation checks show a Gridinsoft trust score of 0 / 100, indicating a lack of trust. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed. VirusTotal analysis recorded a single positive detection out of 95 scanning engines, confirming that at least one vendor identified malicious behavior. The site’s current status is offline, which may be temporary or a takedown response.

Defenders should add the domain and its resolved IP address to DNS‑based deny lists and firewall rules, monitor for any resurgence of the host, and ensure that email gateways enforce URL filtering against the known blocklist entry. Continuous re‑scanning of the domain is advised should it become reachable again, as the single vendor detection suggests that additional malicious components could be present but remain undiscovered. Given the lack of SSL, low trust score, and confirmed phishing page title, the domain should be treated as high‑risk until verified otherwise.