energy999[.]ru

Analysis indicates that the domain energy999.ru is currently active and resolves to the IPv4 address 176.57.64.212, hosted in Russia under AS57724 (DDOS‑GUARD LTD). The site presents a valid TLS certificate issued by Let’s Encrypt (R12) and returns HTTP 200 responses. Registration data shows the domain was created on 14 Mar 2015 through RU‑CENTER‑RU, and its authoritative DNS is provided by ns1.tildadns.com and ns2.tildadns.com. The page title advertises a “Высшая Школа Биоэнергетики Энерджи – ЭзоКоучинг…”, suggesting the site masquerades as an educational or coaching service. Threat intelligence classifies the activity as generic phishing; the domain is listed on a single security blocklist and has been flagged by PhishDestroy. Reputation services assign a Gridinsoft trust score of 0 / 100, and one of ninety‑five VirusTotal scanners reported a detection. No additional forensic evidence such as payload samples or credential‑stealing forms has been disclosed, leaving the exact phishing vector uncertain. Defenders should add energy999.ru to outbound and inbound web filtering rules, monitor DNS queries for the associated nameservers, and consider sinkholing the IP address. Continuous re‑scanning with multi‑engine services is advised to capture any changes in malicious behavior.