svetlo-lobnya[.]ru

The domain svetlo-lobnya.ru is currently active and returns HTTP 200. Its TLS certificate is issued by Let’s Encrypt (R12) and the host resolves to 188.225.23.151, which belongs to a Russian hosting provider (AS9123). The authoritative nameservers are ns1.timeweb.ru, ns2.timeweb.ru, ns3.timeweb.org, and ns4.timeweb.org. Infrastructure analysis shows the site is served by a standard web server behind a CDN and incorporates common analytics and JavaScript libraries. The page title references a municipal children’s camp, but no further page‑content analysis is available. Threat intelligence classifies the domain as a generic phishing site; two of ninety‑five scanners on a public malware repository flagged it, and it appears on two blocklists (PhishDestroy, ScamSniffer) with a Gridinsoft trust score of 0/100. The precise phishing vector and targeted data are not disclosed. Defenders should block or sinkhole the domain at the network perimeter, monitor DNS queries for the associated IP and nameserver set, and add it to email and web filtering rules. Ongoing observation is recommended to capture any payloads or credential‑harvesting pages that may emerge.