kra46-cc[.]kovrolinych[.]ru

Analysis of kra46-cc.kovrolinych.ru as of July 24 2026 shows a high‑risk generic phishing infrastructure that has been taken offline. The domain was registered on December 10 2024 through REGRU‑RU and resolves to the IPv4 address 193.105.134.30, which is hosted in Sweden under ASN 42237 belonging to w1n ltd. Nameservers ns1.armadns.icu and ns2.armadns.icu are used for resolution.

No TLS certificate is presented, leaving the site exposed to downgrade attacks and indicating a lack of legitimate security controls. The page title retrieved prior to takedown, "kra46 - производство CC напольных покрытий премиум‑класса," suggests the site pretended to be a manufacturer of premium floor‑covering products, a typical luring vector for credential harvesting. Detection metrics show that 15 of 95 VirusTotal scanners flagged the domain, Google Safe Browsing categorises it as social engineering, and PhishDestroy has blocked it.

Gridinsoft assigns a trust score of 0 / 100, and the domain appears on a single security blocklist. Given the combination of registrar, hosting, lack of SSL, and multiple independent detections, defenders should add the domain and its IP to outbound filtering rules, monitor for any residual traffic, and ensure that any endpoint detection solutions are updated to include the associated indicators of compromise. Continuous observation for re‑registration or resurrection of similar infrastructure is recommended.