projectdefence[.]moy[.]su

This domain, projectdefence.moy.su, poses a specific threat as a generic phishing site. It was designed to impersonate or mislead users into believing it is a legitimate security-related resource. The domain's elevated risk level and current offline status indicate that it was likely used in a targeted phishing campaign aimed at compromising user credentials or delivering malicious content.

Analysis indicates that projectdefence.moy.su has been flagged by 11 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among the cybersecurity community. The domain was registered through DOMENUS-SU on February 21, 2026, and resolves to the IP address 88.211.243.183, which is located in the Netherlands and belongs to AS7979 Servers.com, Inc. Additionally, the site's SSL certificate is issued by GlobalSign nv-sa / GlobalSign GCC R6 AlphaSSL CA 2023, which may have been used to lend a false sense of security to visitors. The domain appears on 1 known security blocklist, further reinforcing its malicious nature.

Users who have visited projectdefence.moy.su are advised to immediately change any passwords or credentials that may have been entered on the site. It is also recommended to run a comprehensive security scan on any devices that accessed the domain to detect and remove potential malware. Users should report the incident to their organization's IT security team and monitor their accounts for any unusual activity or unauthorized access.