kra47-at[.]potolkisibiri[.]ru

This report analyzes the domain kra47-at.potolkisibiri.ru, which presents itself as "kra47 - AT-школа программирования для подростков" (a programming school for teenagers). Despite this legitimate facade, the domain poses a threat as a likely phishing or scam site, potentially targeting individuals seeking educational services. The use of "kra47" in the title suggests impersonation of a known brand or service related to programming education, designed to deceive users into providing personal or financial information.

Technical evidence shows the domain was flagged by 8 out of 95 VirusTotal vendors, including alphaMountain.ai, BitDefender, CRDF, CyRadar, and Fortinet. It is listed on one blocklist. The domain was created on 2025-01-09 and registered through REGRU-RU. It resolves to IP address 91.236.116.20, hosted by AS42237 w1n ltd in Sweden (SE). The site uses no SSL certificate and has nameservers ns1.armadns.com and ns2.armadns.com. GridinSoft trust rating is 0/100, indicating high risk.

Currently, the site is down or offline, which may indicate it was taken down or is temporarily inactive. The risk level is high based on the number of vendor detections, lack of SSL, recent creation date, and zero trust score. Users should avoid any interaction with this domain and report it to relevant authorities.