bespalov-finance[.]com

The domain bespalov-finance.com was registered on 12 July 2023 through REG.RU LLC and is served by the authoritative name servers ns1.reg.ru and ns2.reg.ru. DNS resolution points exclusively to the IPv4 address 176.57.64.78, which remains active as of the 14 July 2026 observation. The registrar information, creation date, and hosting details are publicly visible via WHOIS records, but no additional metadata such as SSL certificate attributes, website content, or redirection patterns have been disclosed. The threat classification assigned by the monitoring platform is generic_phishing, and the domain is currently listed as active and under investigation. Because the public data does not reveal the specific brand or service being spoofed, analysts cannot confirm the exact lure employed by the site. Nevertheless, the combination of a recent registration, use of a well‑known Russian registrar, and a single‑host IP address is consistent with infrastructure commonly observed in credential‑harvesting campaigns. Defenders should consider adding the domain and its resolved IP to blocklists, enforce DNS‑level filtering, and monitor outbound connections for any attempts to contact the address. Continuous re‑query of the domain’s DNS records is advised to detect possible changes in hosting or the emergence of additional sub‑domains. Organizations that process financial transactions should raise awareness among users about unsolicited communications that reference unfamiliar finance‑related URLs, especially those that share the “finance.com” suffix.