pasport-kupit[.]sbs

PhishDestroy has flagged pasport-kupit.sbs as an elevated-risk, active generic phishing domain. This designation indicates a high probability that the domain is being used to conduct fraudulent activities, such as stealing personal information, specifically related to passport information or sales. Users should exercise extreme caution and avoid interacting with this domain.

Technical indicators for pasport-kupit.sbs include a VirusTotal detection ratio of 4/95, suggesting that while not universally recognized as malicious, a significant number of security vendors have identified it as a potential threat. The domain resolves to IP address 185.110.92.47 and uses an SSL certificate issued by Let's Encrypt. The domain was registered relatively recently, on July 11, 2025, through NICENIC INTERNATIONAL GROUP CO., LIMITED. This recent creation date is common in phishing campaigns, as malicious actors frequently create new domains to evade detection.

To mitigate the risks associated with pasport-kupit.sbs, users should avoid visiting the site, clicking on any links associated with it, or entering any personal information. If you have previously interacted with this domain, it is recommended to change your passwords, monitor your financial accounts for any suspicious activity, and be wary of any unsolicited communications. Report the domain to your email provider and any relevant authorities to help prevent others from falling victim to this phishing campaign.