www-kra-46-cc[.]ru[.]www-kra44-cc[.]ru

This domain, www-kra-46-cc.ru.www-kra44-cc.ru, is currently flagged as a high-risk phishing threat. Registered on November 3, 2025, through DOMENUS-RU, the domain resolves to the IP address 198.251.89.30 and is associated with a Let's Encrypt SSL certificate. The page title, 'Kra46 — атмосферные свечи,' suggests content related to candles or home decor, though the exact nature of the phishing scheme remains unconfirmed due to limited analysis of the site's functionality. No specific brand impersonation is evident from the available data, and the site is classified generically as phishing without further subcategory details. Analysis indicates the domain appears on one security blocklist, and Google Safe Browsing has flagged it under the 'SOCIAL_ENGINEERING' category. VirusTotal reports that 11 out of 95 security vendors have detected malicious activity associated with this domain, reinforcing its classification as a threat. The domain remains active as of July 12, 2026, with no evidence of takedown or mitigation efforts. Infrastructure analysis reveals no additional details about the hosting provider or autonomous system number, limiting further attribution. Defenders should treat this domain as an active phishing threat. The combination of a recent registration date, low trust scores, and multiple vendor detections indicates a likely malicious intent. Network-level blocking of the domain and its resolving IP (198.251.89.30) is recommended to prevent potential credential harvesting or social engineering attacks. Monitoring for related domains registered through the same registrar (DOMENUS-RU) may help identify additional threats in this campaign. Given the lack of confirmed brand impersonation, defenders should assume the site may adapt its content dynamically to target victims.