kra47-at[.]sovyatnik[.]ru

The website kra47-at.sovyatnik.ru presents itself under the title "kra47 - цифровой CC дизайн для рекламных кампаний," which translates to "digital CC design for advertising campaigns." This is a fraudulent site impersonating the Kra47 brand, a known digital marketplace often associated with illicit activities. The threat posed is primarily social engineering, as flagged by Google Safe Browsing, meaning the site likely attempts to deceive users into revealing sensitive information or performing actions that compromise security.

Technical analysis reveals 8 out of 95 VirusTotal detections, with flags from ADMINUSLabs, alphaMountain.ai, CyRadar, Fortinet, and Google Safebrowsing. The domain is registered under REGRU-RU, created on 2024-12-24, hosted on IP 91.236.116.20 (SE) by AS42237 w1n ltd. It lacks SSL encryption, and its nameservers are ns1.armadns.com and ns2.armadns.com. The site is listed on 1 blocklist.

Currently, the site is down or offline, as indicated by its status. Despite being inactive, the risk level is high due to its social engineering classification and low GridinSoft trust score of 0/100. The combination of recent creation, lack of SSL, and multiple security vendor flags suggests this was a malicious site prepared for phishing or credential theft campaigns, posing residual risk if it becomes active again.