kupit-yad[.]net

This domain, kupit-yad.net, is identified as a phishing site specializing in the illicit sale of poison for human use under the guise of anonymity. The page title, 'Купить яд для человека без улик и следов,' explicitly advertises illegal substances, confirming its fraudulent and harmful intent. Currently, the domain is offline, but prior analysis indicates it was actively engaged in criminal solicitation targeting Russian-speaking users. Infrastructure analysis reveals the domain was registered through Fewmoretaps OU d/b/a Trustname.com on April 21, 2026, and resolves to the IP address 188.137.228.130. Despite its malicious purpose, the domain has not been flagged by any of the 95 vendors on VirusTotal, though it appears on two security blocklists, including PhishDestroy and OISD. The SSL certificate is issued by Let’s Encrypt, a common but neutral indicator often exploited by threat actors. Gridinsoft assigns it a trust score of 0/100, and AlienVault OTX has recorded it in one threat intelligence pulse, further corroborating its suspicious nature. Given the domain’s current offline status, immediate threats to users are mitigated. However, security teams should monitor for reactivation or rebranding under similar infrastructure. Organizations are advised to block the domain and its associated IP (188.137.228.130) at the network level, update endpoint protection rules, and conduct retrospective log analysis for prior connections. Law enforcement coordination is recommended due to the domain’s involvement in illegal substance solicitation.