kra46at[.]kussopapua[.]ru

Analysis of kra46at.kussopapua.ru indicates a newly registered Russian-language site that has been associated with generic phishing activity. The domain was created on December 01, 2024 and is currently taken offline, which prevents real‑time verification of its content. VirusTotal records show that five of ninety‑five scanning engines flagged the domain, suggesting the presence of malicious indicators despite the relatively low detection count. The site lacks an SSL certificate, confirming that any traffic to the domain would be unencrypted HTTP, a common characteristic of phishing infrastructure.

It is blocked by the PhishDestroy service and appears on a single security blocklist, reinforcing the assessment that the domain is being used for abusive purposes. The hosting address resolves to 193.105.134.30, an IP located in Sweden and assigned to ASN 42237 (w1n ltd). Gridinsoft assigns a trust score of zero out of one hundred, reflecting a very high risk perception for the host. Registration details reveal that the domain was provisioned through the REGRU‑RU registrar, and the authoritative nameservers are ns1.regerey.com and ns2.regerey.com.

The page title returned by the HTTP response reads "kra46 - AT коллекция этнических мотивов," which does not disclose a targeted brand but suggests the site presents ethnic motif collections, a possible lure for interested users. Defenders should add the domain and its resolving IP to network‑level blocklists, monitor for any re‑activation attempts, and consider expanding detection rules to include similar Russian‑language phishing patterns. Continuous observation of the associated ASN and registrar may reveal additional malicious domains deployed by the same operator, and the absence of TLS should be used as an additional heuristic in threat‑intel feeds.