sreamconmunity[.]ru

This domain, sreamconmunity.ru, is flagged as a credential phishing site specifically targeting Discord users. Analysis indicates the domain was designed to impersonate legitimate Discord community platforms, tricking users into submitting login credentials or other sensitive information. The domain is currently offline, but prior activity and infrastructure suggest a deliberate phishing campaign. Infrastructure analysis reveals the domain was registered through REGRU-RU on April 06, 2026, and resolved to the IP address 62.60.226.105. It was flagged by 12 of 95 security vendors on VirusTotal, indicating a moderate but consistent detection rate. The domain appears on two security blocklists, including specialized phishing detection systems, further corroborating its malicious intent. No legitimate services or historical benign use were identified in open-source intelligence. The domain’s current offline status reduces immediate risk, but the infrastructure remains a potential threat vector. Organizations and users are advised to block the domain and its associated IP at the network perimeter. Security teams should monitor for related domains registered under the same registrar or resolving to the same IP range. End-users who may have interacted with the domain should rotate credentials immediately and enable multi-factor authentication on Discord and other linked accounts.