yupoosunglasses[.]ru

The domain yupoosunglasses.ru has been identified as a high-risk brand impersonation threat specifically targeting Apple. Analysis confirms the domain was actively spoofing Apple’s official branding to deceive users, though it is currently offline. This infrastructure was designed to mimic legitimate Apple services, likely for credential theft or fraudulent transactions. Infrastructure analysis reveals the domain was flagged by 19 of 95 security vendors on VirusTotal, indicating widespread detection. It was registered through RU-CENTER-RU on August 25, 2025, and resolved to the IP address 104.21.78.86, hosted on Cloudflare’s network (AS13335). The domain lacked an SSL certificate, a red flag for user security. It appeared on five security blocklists, including PhishDestroy, Polkadot, Enkrypt, Codeesura, and PhishingDB. The page title, 'Home - yupoosunglasses,' further confirms its deceptive intent, as it bears no relation to Apple’s legitimate branding. At present, yupoosunglasses.ru has been taken offline, though its infrastructure may resurface under a different domain. Organizations and individuals are advised to block the domain and its associated IP (104.21.78.86) at the network level. Security teams should monitor for similar impersonation attempts, particularly domains registered through RU-CENTER-RU or leveraging Cloudflare hosting. Users should verify domain authenticity before entering credentials and report suspicious activity to their security providers.