kra44cc[.]com

Analysis of kra44cc.com indicates this domain is actively involved in phishing operations targeting Russian-speaking users under the guise of artificial intelligence and future technology discussions. Registered on April 21, 2025, through NiceNIC International Group Co., Limited, the domain currently resolves to IP address 198.18.1.170 and is protected by Cloudflare nameservers (olga.ns.cloudflare.com and reese.ns.cloudflare.com), a common tactic to obscure hosting infrastructure and evade takedowns. The SSL certificate is issued by Google Trust Services (WE1), which does not inherently validate legitimacy but is frequently exploited in phishing campaigns to appear secure. The page title, 'Нейросети и будущее технологий — kra44 cc - Ссылка,' suggests the site is impersonating a legitimate AI or technology platform, though the exact content and target brand remain unconfirmed.

As of July 24, 2026, the domain is flagged by at least one security blocklist (PhishDestroy) and detected by 3 of 95 security vendors on VirusTotal, reinforcing its classification as malicious. Gridinsoft assigns a trust score of 0/100, further indicating high risk. The domain remains active, utilizing HTTP/3 and Cloudflare technologies to enhance performance and resilience. Defenders should treat kra44cc.com as a confirmed phishing threat.

Network-level blocking is recommended, particularly for organizations with Russian-speaking users or those in technology sectors. Given the use of Cloudflare, additional monitoring for related domains under the same nameservers or registrar may help identify connected infrastructure. The domain’s registration age (over a year) suggests it may be part of a longer-term campaign, warranting continued vigilance. No evidence currently links this domain to a specific brand or phishing kit, so attribution beyond generic phishing remains uncertain.