kra47-cc[.]bairbie[.]ru

The domain kra47-cc.bairbie.ru has been identified as a fake login phishing site. The domain appears to impersonate a management system for engineering projects, as indicated by the page title 'kra47 - AT-система управления инженерными проектами'. No specific brand impersonation or drainer kit has been observed, but the domain's purpose is to deceive users into providing sensitive information.

Analysis indicates that the domain has a VirusTotal detection score of 12/95, suggesting that a significant number of security vendors recognize it as malicious. The domain is registered through REGRU-RU and resolves to the IP address 91.236.116.20, which is located in Sweden (SE) and associated with AS42237 w1n ltd. The domain was created on December 24, 2024, and has been flagged by Google Safe Browsing as a phishing site. Additionally, the domain appears on 1 security blocklist, further confirming its malicious nature.

The current status of kra47-cc.bairbie.ru is offline, which suggests that the domain has been taken down or is no longer active. Despite this, the infrastructure used to host the domain remains a potential risk. Organizations and individuals should ensure that any cached or bookmarked links to this domain are removed and that users are educated about the risks of phishing sites. Security teams should continue to monitor for any resurgence of activity and update their threat intelligence databases accordingly.