boustrn[.]su

The domain boustrn.su has been identified as a generic phishing threat, meaning it is designed to deceive users into divulging sensitive information such as login credentials or financial data. Unlike targeted impersonations, generic phishing sites often host fake login pages for multiple services or serve as a gateway for credential harvesting. The domain was created on March 26, 2026, which is notably recent, and its registration details suggest an attempt to avoid easy traceability.

Evidence from multiple security sources confirms the malicious nature of this domain. VirusTotal flags it as malicious with 17 out of 95 security vendors detecting threats, a significant proportion that underscores the risk. AlienVault OTX has included boustrn.su in six distinct threat intelligence pulses, indicating active tracking by the cybersecurity community. The domain resolves to IP address 37.77.150.150 and appears on three separate security blocklists. Additionally, it lacks an SSL certificate, which is a common trait of phishing sites that do not prioritize user trust. The domain is currently offline, likely due to being taken down after detection.

Users who have visited boustrn.su should take immediate precautions. If any credentials were entered, they must be changed on the legitimate websites immediately and enable two-factor authentication where available. It is also advisable to run a full security scan on any device used to access the domain, as generic phishing sites may deploy malware or redirect to drive-by download pages. PhishDestroy recommends monitoring financial accounts for unusual activity and remaining vigilant against follow-up phishing attempts that may use harvested data. The domain's rapid takedown is a positive sign, but users should still treat any interaction with boustrn.su as a potential security incident.