richrussianescort[.]net

This domain, richrussianescort.net, is classified as a generic phishing threat. Analysis indicates the site was designed to deceive visitors, likely harvesting personal information or credentials under the pretense of offering escort services. The presence of tracking technologies such as Yandex.Metrika and Google Analytics suggests an intent to profile visitors or monetize traffic through malicious redirects. The domain's SSL certificate from Google Trust Services does not indicate trustworthiness, as phishing sites routinely obtain valid certificates.

Technical indicators confirm the threat. VirusTotal reports 5 out of 95 security vendors flagging the domain as malicious. The domain was registered on February 21, 2026, through the Russian registrar REGRU-RU. It resolves to IP address 45.67.56.238. The domain appears on one security blocklist and has a Gridinsoft trust score of 0 out of 100, reflecting a high-risk profile. The site is currently offline, likely due to takedown action by PhishDestroy.

Users who visited richrussianescort.net should change passwords for any accounts entered on the site and enable multi-factor authentication where possible. They should monitor financial accounts and credit reports for unauthorized activity. If credentials were submitted, they should assume compromise and update those credentials immediately on legitimate sites. Running a full antivirus scan on any device used to access the domain is also recommended, as phishing pages may deliver malware or initiate session hijacking.