ru[.]documentservice[.]pl

Analysis of the domain ru.documentservice.pl indicates that it is currently active and has been allocated to a generic phishing operation. The registration record shows the domain was created on 2020-12-08 and was filed through cyber_Folks S.A., a registrar that continues to host the domain. DNS resolution points to the IPv4 address 34.149.87.45, and the authoritative name servers are ns10.wixdns.net and ns11.wixdns.net, both belonging to the Wix DNS service. The use of Wix's DNS infrastructure suggests the site may be hosted on a shared or managed platform, which can complicate takedown efforts. No additional indicators such as page content, brand targeting, or malware payloads have been disclosed, leaving the exact phishing lure and victim profile uncertain. Defenders should consider adding ru.documentservice.pl to block lists at the network perimeter and DNS filtering layers, monitor traffic for connections to 34.149.87.45, and, where possible, engage the registrar cyber_Folks S.A. for remediation. Ongoing observation is advised to detect any evolution of the campaign or emergence of new artifacts.