kra46cc[.]diana23[.]ru

Analysis of kra46cc.diana23.ru shows that the domain was registered on 07 December 2024 through the Russian registrar REGRU‑RU and is served by the authoritative name servers ns1.regerey.com and ns2.regerey.com. DNS resolution points to the IPv4 address 193.105.134.30, which belongs to AS42237 (w1n ltd) and is geolocated in Sweden. The site does not present an SSL/TLS certificate, indicating that any data exchanged with the host would be transmitted in clear text. The only visible page element is the title “kra46 – AT премиум‑решения для digital‑маркетинга”, which suggests a marketing‑oriented landing page but provides no indication of a legitimate business.

VirusTotal records show that 12 out of 95 scanned security vendors flagged the domain as malicious, and the Gridinsoft trust score is 0 / 100, reinforcing the malicious assessment. The domain is listed on a single security blocklist and has been actively blocked by the PhishDestroy service. The risk rating assigned to the infrastructure is “elevated”, and the unique seed 3e7f39 ties the current analysis to prior observations of related infrastructure.

As of the report date (23 July 2026) the site has been taken offline, limiting immediate threat exposure but leaving the underlying IP and registration details active. Defenders should continue to block the domain and its associated IP address at perimeter and DNS filtering layers, monitor the registrar and name‑server records for re‑registration, and incorporate the IP range of AS42237 into threat‑intel feeds. Ongoing vigilance is required because the lack of TLS and the low trust score indicate a high likelihood of credential‑harvesting or other phishing activity should the site be revived.