kra47-at[.]vesta18[.]ru

The domain kra47-at.vesta18.ru presents itself under the page title "kra47 - AT инновации в вендинговой индустрии," which translates to "kra47 - AT innovations in the vending industry." This is a fraudulent site impersonating the Kraken marketplace brand, leveraging a similar naming pattern to mislead users. The threat it poses includes phishing for credentials, hosting malware, or serving as a gateway for financial fraud by tricking visitors into believing they are accessing a legitimate vending or marketplace service.

Technical evidence shows the site has a VirusTotal detection rate of 9/95, flagged by ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar. It is hosted on IP 91.236.116.20 in Sweden (SE), under AS42237 w1n ltd, and registered with REGRU-RU. The domain was created on January 13, 2025, has no SSL certificate, and uses nameservers ns1.armadns.com and ns2.armadns.com. It is listed on 1 blocklist.

Currently, the site is offline and has a GridinSoft trust score of 0/100, indicating high risk. Based on the low detection rate, recent creation, and lack of SSL, it is a malicious domain likely used for credential harvesting or malware distribution. The risk level is critical for users who may have visited or interacted with it.