kra47-at[.]pro-secure[.]ru

The domain kra47-at.pro-secure.ru was identified as a credential phishing site, designed to steal user login information. There is no evidence it impersonated any specific brand or used a drainer kit. The website has since been taken offline, but while it was active, it posed a significant phishing risk. Users searching for information about kra47-at.pro-secure.ru may be concerned about whether it is a scam or safe to use; available data confirms it was used for phishing and is not safe.

Technical analysis of kra47-at.pro-secure.ru shows that 2 of 95 security vendors on VirusTotal (including Fortinet and SOCRadar) detected it as malicious. The domain was registered through REGRU-RU on January 13, 2025, and resolves to IP address 91.236.116.20, located in Sweden (AS42237 w1n ltd). The site appeared on one security blocklist (PhishDestroy) and received a Gridinsoft trust score of 0/100. The SSL certificate was not present, and the observed page title was 'kra47 - образовательная платформа CC уровня'. Nameservers used were ns1.armadns.com and ns2.armadns.com.

Anyone who entered credentials on kra47-at.pro-secure.ru should immediately change their passwords for affected accounts and enable two-factor authentication where possible. It is also important to monitor accounts for unusual activity and potential fraud. Victims should consider reporting the incident to relevant security authorities or their organization's IT team for further assistance.