kra47at[.]mintlift-official[.]ru

The domain kra47at.mintlift-official.ru is a phishing site associated with a crypto drainer scam, designed to steal cryptocurrency by draining funds from connected wallets. No legitimate brand or known drainer kit is impersonated. As of the latest verification, the site has been taken offline, but prior activity classified it as an elevated-risk threat targeting cryptocurrency users.

Technical indicators confirm the malicious nature of kra47at.mintlift-official.ru. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and SOCRadar, while appearing on one security blocklist (PhishDestroy). Registered through REGRU-RU on February 8, 2025, it resolved to the IP address 193.105.134.30, hosted by AS42237 (w1n ltd) in Sweden. No SSL certificate was present, and the observed page title was 'kra47 - информационный CC портал для анализа рынка недвижимости'. Nameservers were ns1.regerey.com and ns2.regerey.com, and Gridinsoft assigned a trust score of 0/100.

Victims of kra47at.mintlift-official.ru should immediately revoke any token approvals granted to the site via wallet management tools like Etherscan or Revoke.cash. Transfer remaining funds to a new, secure wallet to prevent further unauthorized transactions. Report the domain to platforms such as Google Safe Browsing, PhishTank, or local cybercrime authorities to aid in takedown efforts and protect other users.