kra47at[.]utehnika24[.]ru

The domain kra47at.utehnika24.ru presents a page titled "kra47 - современное CC обучение вождению с нуля," which translates to "kra47 - modern CC driving instruction from scratch." The term "kra47" is a known brand associated with a Russian-language cybercriminal marketplace specializing in stolen credit card data. The site likely poses as a driving school to lure visitors, but its true threat involves phishing for personal information or distributing malware, leveraging the impersonation of a criminal brand to attract malicious actors.

Technical evidence shows the domain is flagged by 12 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar. It is listed on 1 blocklist. The domain was created on 2025-01-09, registered via REGRU-RU, and hosted on IP 91.236.116.20 in Sweden, belonging to AS42237 w1n ltd. It uses nameservers ns1.armadns.com and ns2.armadns.com. No SSL certificate is present. GridinSoft trust rating is 0 out of 100.

Currently, the site is down or offline. Given the high detection rate, association with a cybercriminal brand, and zero trust rating, the risk level is assessed as high. The domain should be treated as a confirmed malicious or phishing resource, even while inactive.