russiannarket[.]to

This domain russiannarket.to was registered on January 29 2025 through INWX GmbH and currently resolves to IP address 104.21.54.188 in the United States under AS13335. The nameservers listed are luke.ns.cloudflare.com and mallory.ns.cloudflare.com while the observed HTTP status returns 200. An SSL certificate issued by Google Trust Services under the WE1 profile is active and the site employs Bootstrap jQuery Cloudflare Browser Insights Cloudflare Popper along with HTTP/3. The page title displayed is Russianmarket.to : Russianmarket to : Russian Market to : rm to : rm.to which aligns with the domain string itself.

Infrastructure analysis reveals the domain appears on one security blocklist and carries a trust score of 0 out of 100. Two out of 95 security vendors flag the domain while the reported threat type remains generic phishing with an active status. The combination of Cloudflare fronting a low trust score and single blocklist entry forms the primary observable evidence available at the report date of July 12 2026.

What remains uncertain is the precise payload delivered to visitors and any specific targets or campaigns tied to the domain beyond the stated generic phishing classification. Ownership details beyond the registrar and creation date are not visible from public records and the exact duration of activity prior to blocklist inclusion cannot be determined from the provided indicators.

Defenders should incorporate the IP address 104.21.54.188 and the domain russiannarket.to into monitoring rules and consider blocking measures consistent with the existing blocklist entry. Logging of any outbound connections to the listed nameservers or the observed IP range is advisable together with verification of user reports that reference the domain title. Continued tracking of status changes is warranted given the current active classification and low trust metrics.