kra46[.]ivan-wb[.]ru

The domain kra46.ivan-wb.ru was registered on 21 February 2026 and is currently listed as offline. Automated scanning services have flagged the site as malicious: VirusTotal recorded 14 positive detections out of 93 submitted security vendors, and the Gridinsoft trust score is 0 / 100, indicating a complete lack of trust. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy mitigation service.

The only visible attribute from the web response is the page title, which returns the literal string “kra46.ivan-wb.ru”, offering no additional context about the intended victim or lure. No SSL certificate information, IP address, hosting provider, or registrar details are available in the current intelligence set, and the site does not appear in public safe‑browsing feeds or Open Threat Exchange listings. Because the infrastructure details are sparse, the precise campaign scope and target audience remain uncertain.

Defenders should ensure that any internal DNS resolvers or proxy filters block resolution of kra46.ivan-wb.ru, confirm that the domain is added to existing blocklists, and monitor for any future re‑registration or activity that could resurrect the phishing infrastructure. Continuous correlation with endpoint telemetry for the 14 VirusTotal‑reported detections is recommended to identify any compromised hosts that may have already interacted with the site before its takedown.