kra46cc[.]uppetit-fr[.]ru

Analysis of kra46cc.uppetit-fr.ru indicates an active generic phishing infrastructure that has been taken offline as of the report date. The domain was registered on December 6 2024 through the REGRU-RU registrar and is hosted on IP 193.105.134.30, which belongs to ASN 42237 operated by w1n ltd in Sweden. No SSL certificate is presented, so any web traffic would be served over plain HTTP. The page title returned by the site reads “kra46 - изысканный AT подход к доставке французской кухни”, implying a Russian‑language lure possibly targeting users interested in French cuisine services.

The domain appears on a single security blocklist and is listed as blocked by PhishDestroy. VirusTotal scans show three of ninety‑five security vendors flagging the domain, confirming a malicious classification. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the low reputation. Nameservers ns1.regerey.com and ns2.regerey.com resolve the domain, consistent with the registrar details.

Although the site is currently offline, the underlying IP address and hosting provider remain active and could be reused for future campaigns. Defenders should continue to block the domain and the associated IP address at network perimeters, update URL filtering and threat‑intelligence feeds, and monitor for any re‑registration or similar naming patterns. Additional verification of the hosting environment and logging of attempted connections to the IP are recommended to detect possible resurgence.