betzulagiris2026[.]com

PhishDestroy has identified betzulagiris2026.com as an elevated risk domain involved in generic phishing campaigns. The site was registered under a privacy-shielded registrar and is now offline, but during its active period it likely attempted to deceive visitors into providing personal information under the guise of offering permanent Moscow residency registration services.

The domain was created on April 28, 2026, and resolved to IP 45.10.243.69. It was registered through Fewmoretaps OU d/b/a Trustname.com, a registrar known for low-cost, privacy-focused domains. VirusTotal flagged it with a 1/95 detection ratio, meaning only one security vendor out of 95 identified it as malicious. It also appears on one security blocklist and was found in one AlienVault OTX threat intelligence pulse. The page title was in Russian, advertising permanent residency registration in Moscow, which is a common lure for phishing targeting Russian-speaking users. The SSL certificate was issued by Let's Encrypt (R12), which is free and automated, often abused by malicious actors.

Users who may have encountered this domain should immediately change any passwords entered on the site and enable two-factor authentication where possible. Since the site is now offline, the immediate threat is contained, but similar domains may appear. Users should avoid clicking on unsolicited links offering residency services and always verify the legitimacy of such offers through official government channels. Monitoring financial accounts for unauthorized activity is also recommended if any personal data was submitted.