kra46-cc[.]vsenovostroyki24[.]ru

Analysis of kra46-cc.vsenovostroyki24.ru shows that the domain was created on 2024-12-06 and is currently taken offline. The domain resolves to the IP address 193.105.134.30, which belongs to AS42237 operated by w1n ltd and is geolocated in Sweden. Registration was performed through the REGRU-RU registrar, and the authoritative name servers are ns1.regerey.com and ns2.regerey.com. No SSL certificate is presented for the host, indicating that communications are unencrypted.

The page title retrieved from the site reads "kra46 - воплощает муниципалитет СС уровня," but the underlying page content has not been publicly examined. Security data indicate that the domain appears on a single blocklist and is actively blocked by PhishDestroy. VirusTotal scans show that nine of ninety‑five antivirus engines flagged the domain, suggesting malicious intent, while the Gridinsoft trust score of zero out of one hundred further reinforces a high risk assessment.

Defenders should treat the domain as a confirmed phishing instrument, block DNS resolution to 193.105.134.30, and add the domain to local allow‑list exclusions. Continuous monitoring of the associated IP range and the registrar's new registrations is advised, as the infrastructure could be reused for future campaigns. Given the lack of TLS, the low trust score, and multiple vendor detections, the domain should be considered unsafe until it is demonstrably cleaned and re‑registered with proper security controls.