hostel-max[.]ru

The domain hostel-max.ru was registered on September 15, 2025 through the REGRU-RU registrar and is currently offline. It resolves to the IPv4 address 193.105.134.30, which is associated with the AS42237 w1n ltd network located in Sweden. The authoritative nameservers for the domain are ns1.regerey.com and ns2.regerey.com. No SSL certificate was observed for the site, indicating that any traffic to the domain would have been unencrypted.

The page title returned when the site was reachable was "krab1 - надёжный хостел макс проверенного CC качества," suggesting a possible focus on a hostel service but providing no further context. Reputation checks show a Gridinsoft trust score of 0 out of 100 and the domain appears on a single security blocklist. VirusTotal analysis recorded 14 detections out of 95 scanned security vendors, and the domain is listed as blocked by the PhishDestroy service. These data points collectively indicate a high likelihood that the domain was used for malicious activity, specifically generic phishing, although the precise payload or credential‑stealing mechanism has not been publicly disclosed.

Uncertainty remains around the exact phishing campaign details, such as targeted brands or the content of any compromised pages, because only the page title and infrastructure attributes are available. Defenders should continue to enforce blocking of the domain at perimeter defenses, monitor for any residual DNS queries to the IP address 193.105.134.30, and ensure that any user‑submitted credentials potentially harvested from this site are treated as compromised. Given the offline status, no active threat is observed, but the infrastructure footprint should be retained in threat‑intel feeds for future correlation.