smtp[.]lombard4u[.]ru

This domain presents an elevated risk as a generic phishing threat. PhishDestroy has confirmed that smtp.lombard4u.ru hosts a fraudulent Roundcube Webmail login page designed to steal email credentials from unsuspecting users. The site was created on February 21, 2026, and registered through REGRU-RU, a Russian registrar. It resolves to IP address 5.181.109.68 and uses a Let's Encrypt SSL certificate (R13) to appear legitimate. VirusTotal shows 1 out of 95 security vendors flagging this domain, and it appears on 3 security blocklists. The page title was "Roundcube Webmail :: Welcome to Roundcube Webmail," mimicking a legitimate email interface. The domain has since been taken offline, but users who may have interacted with it should take immediate action.

Given the phishing nature of this site, anyone who entered credentials on smtp.lombard4u.ru should change their email password immediately and enable two-factor authentication if available. It is also recommended to scan the affected device for any malware that may have been downloaded. Users should monitor their accounts for suspicious activity and report any unauthorized access to their email provider. To avoid similar threats in the future, always verify the URL before logging into webmail services and avoid clicking on links in unsolicited emails.