kra46[.]sweet-swim[.]ru
“Website 91.236.116.20 is ready. The content is to be added”
kra46.sweet-swim.ru — 内容不可用. 证据摘要: VirusTotal 9/93 (alphaMountain.ai, CRDF, CyRadar, G-Data, Google Safebrowsing); PhishDestroy score 77/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain, kra46.sweet-swim.ru, is configured as a placeholder site with the page title "Website 91.236.116.20 is ready. The content is to be added," indicating it has no active content and is likely prepared for future malicious deployment. The threat posed is its potential use as a phishing, malware distribution, or command-and-control infrastructure, given its low trust score and detection history.
Technical evidence shows the domain was created on 2026-02-21 and resolves to IP address 193.105.134.30, hosted by AS42237 w1n ltd in Sweden (SE). VirusTotal reports 9 out of 95 vendors flagged the domain as malicious, with detections from alphaMountain.ai, CRDF, CyRadar, G-Data, and Google Safebrowsing. The domain is on 1 blocklist, uses SSL certificate associated with IP 91.236.116.20, and has a DOM risk score of 63.
The domain is currently offline and down. GridinSoft assigns a trust rating of 0 out of 100, indicating a high-risk profile. The risk level is elevated due to the low trust score, multiple vendor flags, and recent creation date, suggesting it is prepared for imminent malicious activity.
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。