kra47at[.]skvortsovo-let[.]ru

The domain kra47at.skvortsovo-let.ru is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, kra47at.skvortsovo-let.ru has been taken offline, but its prior activity poses an elevated risk to users who may have interacted with it.

Technical analysis shows that kra47at.skvortsovo-let.ru was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and SOCRadar. The domain was registered through REGRU-RU on January 13, 2025, and resolved to the IP address 91.236.116.20, hosted by AS42237 (w1n ltd) in Sweden. It appeared on one security blocklist (PhishDestroy) and had no SSL certificate. The observed page title was identical to the domain name, kra47at.skvortsovo-let.ru, and it used nameservers ns1.armadns.com and ns2.armadns.com. Gridinsoft assigned it a trust score of 0/100.

Users who suspect they interacted with kra47at.skvortsovo-let.ru should immediately change any credentials entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized access or fraudulent transactions. Report the phishing domain to local cybersecurity authorities, your email provider, or platforms like Google Safe Browsing or PhishTank to help prevent further abuse.