kra47-at[.]gepard-telecom[.]ru

The domain kra47-at.gepard-telecom.ru presents itself as "kra47 - CC технологии для профессиональной колеровки" (CC technologies for professional coloring), a likely front for a phishing or malware distribution site. The page title suggests an attempt to impersonate a legitimate business offering professional color matching services, a common tactic used to deceive visitors into interacting with malicious content. The primary threat is that the site may host malware, steal credentials, or distribute fraudulent software, as indicated by its low trust score and detection history.

Technical analysis reveals the site is flagged by 6 out of 95 VirusTotal vendors, including alphaMountain.ai, CyRadar, Fortinet, SOCRadar, and Sophos. It is listed on 1 blocklist. The domain is registered with REGRU-RU and was created on January 13, 2025. The IP address is 91.236.116.20, hosted by AS42237 w1n ltd in Sweden (SE). The site uses no SSL certificate, suggesting insecure communications. Nameservers are ns1.armadns.com and ns2.armadns.com.

The site is currently offline, but its recent creation date and detection by multiple security vendors indicate a high risk. With a GridinSoft trust score of 0 out of 100, the domain is considered malicious. Users should avoid any interaction with this domain or its content.