kra47-at[.]tk-23[.]ru

This report analyzes the domain kra47-at.tk-23.ru, which presented a page titled "kra47 - производство CC изделий из карельской берёзы" (Russian for "kra47 - production of CC products from Karelian birch"). The site claims to be a manufacturer of CC (likely "credit card" or "counterfeit card") items, indicating it is a scam and fraud operation. It poses a significant threat by potentially offering forged physical cards, phishing for personal data, or delivering malware, and is designed to deceive users into engaging with illegal financial activities.

Technical evidence confirms the malicious nature of this domain. VirusTotal shows 10 out of 95 security vendors flagged it as malicious, with detections from ADMINUSLabs, BitDefender, CRDF, CyRadar, and Fortinet. Google Safe Browsing lists it as FLAGGED for SOCIAL_ENGINEERING. The domain is hosted on IP address 91.236.116.20 in Sweden (SE), under AS42237 w1n ltd, and was registered on 2024-12-24 via registrar REGRU-RU. It has no SSL certificate and uses nameservers ns1.armadns.com and ns2.armadns.com. One blocklist entry is reported.

The domain is currently DOWN/OFFLINE, with a GridinSoft trust rating of 0/100, indicating extremely low trust. The risk level is high due to its clear association with financial fraud and social engineering threats. Users should avoid any interaction with this domain or its associated content.