kra47-cc[.]optika-doma[.]ru
“kra47 - AT студия роскошных ресниц”
kra47-cc.optika-doma.ru — 内容不可用. 证据摘要: VirusTotal 10/95 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Fortinet); Google Safe Browsing flagged; PhishDestroy score 80/100. 注册商: REGRU-RU.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This report analyzes the domain kra47-cc.optika-doma.ru, which is currently offline. The site claimed to be a beauty studio named "kra47 - AT студия роскошных ресниц" (AT studio of luxurious eyelashes). The domain name "kra47-cc" suggests a potential impersonation of the "Kraken" brand, commonly associated with cybercriminal marketplaces, though no direct evidence of this is provided. The primary threat is social engineering, as flagged by Google Safe Browsing.
Technical analysis shows the domain was flagged by 10 out of 95 VirusTotal vendors, including alphaMountain.ai, BitDefender, CRDF, CyRadar, and Fortinet. Google Safe Browsing flagged it for SOCIAL_ENGINEERING. The domain was created on 2024-12-24 and registered with REGRU-RU. It resolves to IP address 91.236.116.20, hosted in Sweden (SE) by AS42237 w1n ltd. No SSL certificate was present. Nameservers were ns1.armadns.com and ns2.armadns.com. The site appears on 1 blocklist.
The domain is currently DOWN/OFFLINE, with a GridinSoft trust score of 0/100, indicating high risk. While the site is not currently accessible, its social engineering classification and low trust score suggest it was a malicious or deceptive operation. Risk level is high if the domain becomes active again.
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。