sara-tv[.]biz

PhishDestroy has placed the domain sara-tv.biz under active investigation due to confirmed generic phishing behavior. The risk level is currently classified as under investigation, meaning analysts are gathering additional evidence to confirm the full scope of the threat. This specific type of phishing campaign targets users with a fake Russian-language CAPTCHA page titled "Вы не робот?" ("Are you a robot?"), a common social engineering tactic designed to trick visitors into completing actions that compromise their security.

The domain was created on November 23, 2017, and registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP address 91.206.71.84 and uses an SSL certificate issued by Google Trust Services (WE1). VirusTotal analysis shows 0 out of 95 security vendors have flagged the domain, but it already appears on one security blocklist. The current status is offline, indicating the domain has been taken down or is no longer resolving. Despite the low detection rate, the presence on a blocklist and the suspicious page title warrant caution.

Users who encounter sara-tv.biz or similar CAPTCHA pages should avoid interacting with them entirely. Do not enter any personal information, click buttons, or complete any challenges. PhishDestroy recommends blocking the domain at the network level and reporting it to your security team. For organizations, ensure web filtering solutions are updated to block this domain and monitor for any internal access attempts. Always verify the legitimacy of CAPTCHA prompts, especially when they appear on unrelated or unfamiliar websites.