petrushkaskypka[.]com

Analysis of the domain petrushkaskypka.com indicates it was utilized as a credential theft site, posing a significant risk to users who may have interacted with it. There is no specific brand impersonation or crypto drainer kit identified in the current threat landscape.

Technical indicators reveal that petrushkaskypka.com was flagged by 18 out of 95 security vendors on VirusTotal, suggesting a moderate level of consensus among the security community regarding its malicious nature. The domain was registered through Global Domain Group LLC and resolved to the IP address 172.67.172.83. The domain was created on March 12, 2026, and currently appears on one security blocklist. The SSL certificate was issued by Let's Encrypt, which is a common practice for phishing sites to gain user trust.

The domain is currently offline, and it has been blocked by the PhishDestroy system to mitigate further risk. Despite the offline status, the remaining risk is elevated due to the potential for the domain to be reactivated or for the threat actor to use similar infrastructure. Users who have interacted with this domain are advised to change passwords and monitor their accounts for any unauthorized activity. Organizations are recommended to update their security policies and block this domain to prevent future incidents.