kra47-at[.]teremok-kyt[.]ru

The domain kra47-at.teremok-kyt.ru presents itself as a provider of innovative credit card (CC) solutions for network infrastructure, as indicated by its page title. This is a common front for carding operations, offering stolen credit card data or related services to cybercriminals. The site poses a direct threat to financial security by facilitating the sale and distribution of compromised payment card information, which can lead to fraud and unauthorized transactions.

Technical analysis confirms the malicious nature of this domain. VirusTotal reports 9 out of 95 security vendors flagging it as malicious, with detections from ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar. It is listed on one blocklist. The domain was created on 2025-01-09 via registrar REGRU-RU. It resolves to IP address 91.236.116.20, hosted by AS42237 w1n ltd in Sweden. The domain uses nameservers ns1.armadns.com and ns2.armadns.com and has no SSL certificate. GridinSoft assigns a trust rating of 0 out of 100.

The site is currently offline or down. Based on the available data, the risk level is high due to the clear association with carding activity, recent creation date, multiple vendor detections, and zero trust rating. The domain should be blocked and monitored for future reactivation.