kra46-cc[.]sco-project[.]ru

The domain kra46-cc.sco-project.ru was created on December 10, 2024 and is registered through the REGRU-RU registrar. It resolves to the IPv4 address 193.105.134.30, which is assigned to AS42237 operated by w1n ltd in Sweden. The authoritative name servers are ns1.armadns.com and ns2.armadns.com. No TLS certificate is presented for the host, indicating that the site was served over plain HTTP only.

The page title retrieved from the site reads "kra46 - управление строительными проектами по CC стандартам," a Russian phrase describing construction‑project management under CC standards, but the content of the page has not been publicly released for analysis. Security monitoring shows that the domain is currently offline and has been blocked by the PhishDestroy sinkhole. It appears on a single security blocklist and has been flagged by Google Safe Browsing for social‑engineering content. VirusTotal analysis reports that 13 of 95 scanned security vendors classified the domain as malicious.

The Gridinsoft trust score is 0 out of 100, reinforcing the low confidence in the domain’s legitimacy. Given the combination of a non‑TLS endpoint, a malicious classification by multiple scanners, a Google Safe Browsing social‑engineering flag, and its presence on a blocklist, the domain should be treated as a high‑risk phishing infrastructure. Defenders are advised to continue blocking the domain at perimeter and DNS layers, monitor for any resurrection attempts, and add the associated IP address 193.105.134.30 to threat‑intel feeds. Because the site is offline, further content analysis is not possible at this time; however, any future re‑appearance should be investigated for credential‑harvesting forms or deceptive redirects targeting Russian‑speaking users.