novosibirsk[.]websitenp[.]ru

This report analyzes the domain novosibirsk.websitenp.ru, which is identified as a Government Impersonation scam. The site posed as an official government entity, likely targeting users in the Novosibirsk region of Russia. The primary threat is social engineering, as the site attempted to deceive visitors into providing sensitive information or performing actions under the false pretense of legitimacy.

Technical evidence confirms the malicious nature of this domain. VirusTotal flagged it with 16 out of 95 detections, and it was specifically reported by ADMINUSLabs, BitDefender, CyRadar, ESET, and Emsisoft. Google Safe Browsing marked the site as FLAGGED for SOCIAL_ENGINEERING. The domain was registered through BEGET-RU and created on 2018-07-16, hosted on IP address 87.236.16.235 under AS198610 Beget LLC in Russia. It used an SSL certificate from Let's Encrypt (R13) and had nameservers ns1.beget.com, ns1.beget.pro, ns2.beget.com, and ns2.beget.pro. The domain is listed on 2 blocklists.

As of the latest check, the domain is DOWN or OFFLINE, indicating it is no longer accessible. GridinSoft assigns a trust score of 0 out of 100, reflecting a high-risk profile. The combination of government impersonation, social engineering flags, and multiple security vendor detections categorizes this as a significant threat, though its current offline status reduces immediate risk.