kra47-at[.]seo-kursy-online[.]ru

The domain kra47-at.seo-kursy-online.ru is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, the site has been taken offline, but it previously posed an elevated risk of credential theft or other fraudulent activity.

Technical indicators confirm kra47-at.seo-kursy-online.ru was flagged by 3 of 95 VirusTotal security vendors, including alphaMountain.ai, Fortinet, and SOCRadar. It appeared on one security blocklist (PhishDestroy) and was registered through REGRU-RU on February 07, 2025. The domain resolved to IP address 193.105.134.30, hosted by AS42237 (w1n ltd) in Sweden, with no SSL certificate. Nameservers were ns1.regerey.com and ns2.regerey.com, and the observed page title was 'kra47 - CC управление логистическими цепочками'. Gridinsoft assigned a trust score of 0/100, and the HTTP status returned was 429.

Users who may have interacted with kra47-at.seo-kursy-online.ru should immediately change any passwords entered on the site and enable two-factor authentication (2FA) on affected accounts. Monitor financial statements and credit reports for signs of fraud. Report the phishing domain to Google Safe Browsing, the registrar (REGRU-RU), and local cybercrime authorities. If browser warnings persist, clear cache and verify the site’s status via VirusTotal or other security tools.