kra47-cc[.]taxi-alina[.]ru

The domain kra47-cc.taxi-alina.ru is a confirmed generic phishing site designed to impersonate government entities, posing an elevated risk of credential theft or social engineering attacks. No specific brand or drainer kit was identified in association with this domain. As of the latest verification, kra47-cc.taxi-alina.ru has been taken offline, though prior activity classified it as a government impersonation scam.

Technical analysis of kra47-cc.taxi-alina.ru reveals limited but clear indicators of malicious intent. The domain was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and was actively listed on Google Safe Browsing for 'SOCIAL_ENGINEERING'. It appeared on 1 security blocklist (PhishDestroy) and was registered through REGRU-RU on March 02, 2025. The domain resolved to IP address 193.105.134.30, hosted by AS42237 (w1n ltd) in Sweden, with no SSL certificate issued. Nameservers were ns1.regerey.com and ns2.regerey.com, and the observed page title was 'krab1 - AT-клуб для любителей мотоспорта'. Gridinsoft assigned a trust score of 0/100 to the domain.

Individuals who may have interacted with kra47-cc.taxi-alina.ru should immediately change any credentials entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized activity. Victims are advised to report the phishing domain to their local cybercrime authorities, Google Safe Browsing, and platforms like PhishTank or OpenPhish. If financial or cryptocurrency transactions were involved, contact the relevant institution to freeze or reverse transfers. Regularly review account statements and credit reports for signs of fraud.