kra45-at[.]kra---40------cc[.]ru

The domain kra45-at.kra---40------cc.ru has been identified as a generic phishing site. Analysis indicates that the domain is associated with no specific brand or drainer kit, suggesting a broad-based phishing campaign designed to target a wide audience.

Infrastructure analysis reveals a VirusTotal score of 12/95, indicating that 12 security vendors flag this domain as malicious. The domain is registered through UK-WIN (ASN: 42237) and resolves to the IP address 193.105.134.30, which is located in Sweden (SE) under the network operated by AS42237 w1n ltd. The domain does not use an SSL certificate, and it appears on one security blocklist. The creation date is not provided, but the current status is offline, which suggests that the domain may have been taken down due to its malicious nature.

The domain is currently offline, and PhishDestroy has blocked it. Despite the domain being offline, there remains a risk if users have been previously compromised. Organizations are advised to monitor their network for any signs of unauthorized access and educate users on the dangers of phishing. Further, it is recommended to implement multi-factor authentication and keep security software up to date.