soundlovlr[.]ru

The domain soundlovlr.ru was registered on 13 February 2026 through the registrar REGRU‑RU and resolves to the IP address 196.251.107.40. Authoritative name servers are ns1.reg.ru and ns2.reg.ru, indicating management under the Russian .ru TLD infrastructure. As of 20 July 2026 the domain remains active and appears on one public blocklist. The threat‑intel feed PhishDestroy has already added soundlovlr.ru to its blocklist, classifying it as a generic phishing site. VirusTotal reports that 14 of 95 scanning engines have flagged the domain as malicious, providing additional corroboration of malicious intent. No further public reputation sources such as Safe Browsing, OTX, or SSL/TLS details are present in the current intelligence set, and the exact landing‑page content or HTTP response codes have not been disclosed. Consequently, the specific phishing vector, targeted brand, and payload characteristics are still unknown. Defenders should block any network traffic to 196.251.107.40 and enforce DNS filtering for soundlovlr.ru. Security operations teams are advised to add the domain to internal deny lists, monitor for any newly observed command‑and‑control communications, and re‑evaluate the indicator if additional context such as page titles or payload samples becomes available. Continued observation of the registrar REGRU‑RU and its associated name servers may provide early warning of future malicious domains under the same administrative control.