kra47-at[.]gruz-rnd[.]ru
“kra47 - яркие AT путешествия по живописным местам”
kra47-at.gruz-rnd.ru — 内容不可用. 证据摘要: VirusTotal 9/95 (alphaMountain.ai, BitDefender, CRDF, CyRadar, Fortinet); PhishDestroy score 77/100. 注册商: REGRU-RU.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
The domain kra47-at.gruz-rnd.ru hosts a site titled "kra47 - яркие AT путешествия по живописным местам," which translates to "bright AT travel to scenic places." This site appears to impersonate the Kraken/Kra47 brand, a known darknet marketplace, by using the "kra47" prefix in the domain name and page title. The threat posed is that the site likely serves as a phishing or scam page designed to harvest credentials or distribute malware under the guise of travel-related content, targeting users familiar with the Kraken brand.
Technical analysis reveals the site has a VirusTotal detection rate of 8/95 vendors, flagged by alphaMountain.ai, BitDefender, CRDF, CyRadar, and Fortinet. It is listed on 1 blocklist. The domain was registered on 2025-01-13 with registrar REGRU-RU, hosted on IP 91.236.116.20 (SE) under AS42237 w1n ltd. No SSL certificate is present. Nameservers are ns1.armadns.com and ns2.armadns.com. GridinSoft trust rating is 0/100.
The site is currently OFFLINE. Given the low trust rating, high vendor detection, and absence of SSL, the risk level for users who may have accessed it is high, as it was likely used for credential theft or malware delivery.
威胁响应 Pipeline
公共封禁名单状态
VirusTotal 分析
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。