morskoysled[.]ru

Analysis of morskoysled.ru indicates that the domain was registered on 15 August 2025 through the Russian registrar REGRU-RU. The authoritative name servers ns1.regerey.com and ns2.regerey.com resolve the domain to the IP address 198.18.1.40, which currently lacks an SSL certificate, leaving traffic unencrypted. The only publicly visible page title reads “Морской след — онлайн-магазин морепродуктов с доставкой”, suggesting the site was presented as an online seafood retailer, though no additional content has been captured.

Reputation checks show that four of ninety‑five VirusTotal scanners flagged the domain, and Gridinsoft assigned a trust score of 0 / 100, indicating a high likelihood of malicious intent. The domain appears on one external security blocklist and has been listed by the phishing mitigation service PhishDestroy. AlienVault OTX references the domain in a single threat‑intelligence pulse, further corroborating its association with malicious campaigns.

The site is presently taken offline, limiting immediate exposure, yet the combination of recent registration, lack of TLS, low trust scores, and multiple independent detections suggests a purposeful phishing operation. Defenders should continue to block the domain at perimeter controls, monitor DNS queries for the associated IP and name servers, and consider adding the address to threat‑intel feeds. Ongoing observation is required to determine whether the operators reactivate the site or reuse the same registration details for future campaigns.