kra47-at[.]grandtech24[.]ru

The domain kra47-at.grandtech24.ru presents itself as an education platform under the title "kra47 - образование нового поколения по CC стандартам." This branding aligns with known fraudulent schemes that impersonate educational or certification services, likely targeting individuals seeking credentials in carding (CC) or related cybercriminal activities. The site poses a threat by potentially distributing malware, harvesting personal data, or facilitating fraud under the guise of legitimate training.

Technical analysis reveals the domain was created on 2025-01-09 via registrar REGRU-RU. It is hosted on IP 91.236.116.20, associated with AS42237 w1n ltd based in Sweden. VirusTotal reports 9 out of 95 security vendors flagging the domain as malicious, with detections from ADMINUSLabs, BitDefender, CRDF, CyRadar, and G-Data. The domain is listed on 1 blocklist. No SSL certificate is present. Nameservers are ns1.armadns.com and ns2.armadns.com. GridinSoft trust rating is 0 out of 100.

The domain is currently down or offline, reducing immediate risk. However, based on the high number of vendor detections, recent creation date, and lack of SSL, the overall risk level is assessed as high. The site is likely part of a short-lived malicious campaign and may reappear under similar domains.