kra47at[.]renault-156[.]ru

The domain kra47at.renault-156.ru hosted a site titled "kra47 - магическая CC платформа для духовного развития" (magical CC platform for spiritual development). This title combines a reference to the known "Kraken" or "Kra47" darknet marketplace brand with a false claim of spiritual development, likely to deceive users into believing the site offers legitimate services while it poses a threat of credential theft, malware distribution, or financial fraud.

Technical evidence shows the site was flagged by 10 out of 95 VirusTotal vendors, including ADMINUSLabs, BitDefender, CRDF, CyRadar, and Fortinet, with 1 blocklist entry. It was registered on 2025-01-09 via the Russian registrar REGRU-RU. The IP address 91.236.116.20, located in Sweden (SE), is associated with AS42237 w1n ltd. No SSL certificate was detected. The nameservers ns1.armadns.com and ns2.armadns.com were used. GridinSoft trust rating is 0 out of 100.

The site is currently offline and down. Given the high detection rate, association with a known malicious brand, recent registration, lack of SSL, and zero trust rating, the risk level is high. Users should avoid any interaction with this domain.