kra--------45--at[.]ru

The domain kra--------45--at.ru is a generic phishing site posing an elevated risk of credential theft or fraudulent transactions. It does not impersonate a specific brand or deploy a known drainer kit. As of the latest verification, kra--------45--at.ru has been taken offline, though prior activity classified it as active phishing infrastructure.

Technical indicators confirm kra--------45--at.ru was flagged by 3 of 95 VirusTotal security vendors, including Fortinet, Gridinsoft, and SOCRadar. The domain was registered through REGRU-RU on November 18, 2025, and resolved to IP address 193.105.134.21, hosted by AS42237 (w1n ltd) in Sweden. It appeared on one security blocklist (PhishDestroy) and had no SSL certificate. The observed page title was 'Коллекции Kra45 AT - Локальный маркет с изделиями мастеров', and Gridinsoft assigned a trust score of 0/100. Nameservers were ns1.reg.ru and ns2.reg.ru.

Individuals who interacted with kra--------45--at.ru should immediately change any credentials entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized transactions or identity fraud. Report the domain to local cybercrime authorities, Google Safe Browsing, and the registrar (REGRU-RU) to support takedown efforts. If financial data was exposed, contact the relevant institution to secure accounts and review recent activity.