pasaremos[.]pw

On 24 July 2026 the domain pasaremos.pw is observed as active and serving HTTP content with status code 200. The site presents the page title "!Pasaremos - форум свободного общения", indicating a Russian‑language forum but no further content analysis is available. Registration information shows the domain was created on 26 November 2025 through TLD Registrar Solutions Ltd and is hosted on the IP address 104.21.34.210, which belongs to Cloudflare, Inc. (AS13335) and resolves via the Cloudflare nameservers alfred.ns.cloudflare.com and tegan.ns.cloudflare.com. No TLS certificate is presented, so connections are unencrypted.

Threat intelligence flags the domain as a generic phishing site; it is currently listed on one security blocklist and has been blocked by the PhishDestroy service. VirusTotal reports a single detection out of 95 scanned vendors, and the Gridinsoft trust score rates the domain at 0 / 100, indicating a high confidence of malicious intent. The limited detection footprint—only one blocklist entry and a single vendor flag—introduces uncertainty about the breadth of distribution, but the combination of an unencrypted site, low trust score, and phishing classification warrants immediate defensive action.

Defenders should add pasaremos.pw to perimeter blocklists, enforce HTTPS‑only policies to prevent accidental clear‑text connections, and monitor DNS queries for the domain and its associated IP. Continuous re‑scanning with multi‑vendor services is advised to detect any changes in threat posture. Until further analysis of the page content is performed, the domain should be treated as high‑risk and excluded from user access.