kra47at[.]vectors64[.]ru

The domain kra47at.vectors64.ru is a generic phishing site designed to steal user credentials or sensitive information through deceptive means. It does not impersonate a specific brand or utilize a known drainer kit. As of the latest verification, kra47at.vectors64.ru has been taken offline, but its prior activity poses an elevated risk to users who may have interacted with it.

Technical analysis reveals that kra47at.vectors64.ru was flagged by 14 of 95 security vendors on VirusTotal, including ADMINUSLabs, alphaMountain.ai, and BitDefender. The domain was registered through REGRU-RU on February 07, 2025, and resolved to the IP address 193.105.134.30, hosted by AS42237 (w1n ltd) in Sweden. It appeared on one security blocklist (PhishDestroy) and lacked an SSL certificate, with a Gridinsoft trust score of 0/100. The observed page title was 'kra47at.vectors64.ru', and the site returned an HTTP 429 status. Nameservers were ns1.regerey.com and ns2.regerey.com.

Users who visited kra47at.vectors64.ru should immediately change any passwords or credentials entered on the site, enable two-factor authentication (2FA) on affected accounts, and monitor for unauthorized activity. If financial or cryptocurrency details were exposed, revoke any token approvals and consider transferring funds to a new wallet. Report the phishing domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts.