kra47---cc--c[.]ru

PhishDestroy identifies kra47---cc--c.ru as an active crypto drainer phishing site currently under investigation. The domain impersonates cryptocurrency platforms to steal digital assets via malicious scripts and fake login portals. Users are urged to avoid engagement until further analysis is complete. kra47---cc--c.ru was registered through REGRU-RU on February 07, 2026, and resolves to IP 172.67.170.115. Despite 0 detections from VirusTotal vendors (1/95), the domain holds an SSL certificate issued by Google Trust Services. This combination of low detection rates, recent creation, and high-reputation SSL issuance creates a deceptive trust signal that cybercriminals leverage to execute crypto drainer operations. The domain remains unblocked by major threat intelligence platforms, increasing exposure risk to unsuspecting users. The current status of kra47---cc--c.ru remains active with elevated risk potential due to its crypto drainer functionality and low detection footprint. Users should avoid clicking links or entering credentials on this domain. PhishDestroy recommends immediate domain blocking at the network level and updating endpoint protection rules to flag this URL. For verification, cross-reference the domain against PhishDestroy's real-time threat database using the unique seed identifier 308330. Exercise heightened caution with recently registered domains hosting financial impersonation content, as they frequently serve as fronts for crypto drainer campaigns.