spravka-service2[.]com

This domain, spravka-service2.com, is identified as a phishing site impersonating a legitimate service offering forged documents, including certificates, diplomas, and official records in Moscow. The page title, 'Оформление справок, дипломов и свидетельств в Москве с доставкой | Надежно и быстро,' explicitly advertises fraudulent document procurement, targeting individuals seeking counterfeit credentials. Such sites are commonly used to harvest personal and financial information under false pretenses, often leading to identity theft or financial fraud. Analysis indicates the domain was registered on June 17, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to the IP address 5.187.6.236. It is flagged by 2 out of 95 security vendors on VirusTotal, appears on 1 security blocklist, and has been included in 2 AlienVault OTX threat intelligence pulses. The site employs Let's Encrypt SSL certification, a common tactic among malicious actors to mimic legitimacy. Detected technologies include WordPress, MySQL, PHP, Nginx, Yandex.Metrika, jQuery Migrate, and jQuery, suggesting a structured but fraudulent web infrastructure. Users who visited spravka-service2.com should immediately cease all interaction with the site and avoid providing any personal or financial information. If credentials or payment details were entered, affected individuals should reset passwords for all accounts using the same credentials, monitor financial statements for unauthorized transactions, and consider placing a fraud alert on their credit files. System scans for malware are recommended, as phishing sites may deploy additional payloads. The domain is currently offline, but users should remain vigilant for similar fraudulent schemes impersonating document services.