kra47-at[.]finpat24[.]ru

This report analyzes the domain kra47-at.finpat24.ru. Based on the page title "kra47 - AT стандарты в логистике грузоперевозок" (translated as "kra47 - AT standards in freight logistics"), the site presents itself as a logistics or freight transport service. The use of "kra47" in the title suggests an attempt to impersonate the Kraken marketplace brand, a known dark web entity. The threat posed is likely a phishing or credential harvesting site targeting users seeking logistics services, or a fraudulent front for illicit transactions.

Technical evidence shows the domain was flagged by 11 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar. It appears on 1 blocklist. The domain was created on 2025-01-13 via registrar REGRU-RU. The IP address is 91.236.116.20, hosted in Sweden (SE) on AS42237 (w1n ltd). No SSL certificate is present. Nameservers are ns1.armadns.com and ns2.armadns.com. GridinSoft trust rating is 0 out of 100.

As of analysis, the domain is DOWN/OFFLINE. The risk level is high due to the high number of detections, recent creation date, lack of SSL, and very low trust score, combined with the impersonation of a known brand. Users should avoid any interaction with this domain.