kra46at[.]pollovnik[.]ru

The domain kra46at.pollovnik.ru was identified as a generic phishing site posing an elevated risk. It did not impersonate a specific brand or deploy a known drainer kit. As of the latest verification, kra46at.pollovnik.ru has been taken offline, though it previously operated as a credential-harvesting page targeting users with a fake archaeological analysis platform interface.

Technical indicators confirm kra46at.pollovnik.ru was flagged by 3 of 95 VirusTotal security vendors, including Fortinet, SOCRadar, and Webroot. The domain was registered through REGRU-RU on December 10, 2024, and resolved to the IP address 193.105.134.30, hosted under AS42237 (w1n ltd) in Sweden. It appeared on one security blocklist (PhishDestroy) and lacked an SSL certificate. The observed page title was 'kra46 - AT платформа для анализа археологических находок', and its nameservers were ns1.armadns.icu and ns2.armadns.icu. Gridinsoft assigned it a trust score of 0/100.

Users who interacted with kra46at.pollovnik.ru should immediately change any credentials entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized activity. Report the domain to local cybersecurity authorities or platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group. If financial or cryptocurrency accounts were accessed, revoke any suspicious token approvals and transfer funds to a new, secure wallet.