passports-garant[.]com

This domain, passports-garant.com, is identified as a fraudulent phishing site targeting individuals seeking illegal Russian passport services. The page title, "Купить новый паспорт РФ без предоплаты с проводкой по базе," translates to an offer to purchase a new Russian Federation passport without upfront payment, with database registration. Such schemes are designed to harvest personal and financial information from victims under the pretense of providing counterfeit or illegally obtained government documents. The domain poses a direct risk of identity theft, financial fraud, and potential legal consequences for users engaging with its content. Analysis indicates the domain was registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com. It resolved to the IP address 188.137.178.202 and was flagged by 6 out of 95 security vendors on VirusTotal. The domain appears on two security blocklists, including PhishDestroy and OISD, and was referenced in one threat intelligence pulse on AlienVault OTX. Infrastructure analysis reveals the use of WordPress, MySQL, PHP, Nginx, and jsDelivr, with a Let's Encrypt SSL certificate. The Gridinsoft trust score for this domain is 0 out of 100, further confirming its malicious nature. Users who visited passports-garant.com or interacted with its content should immediately cease all engagement and take corrective actions. Isolate any devices used to access the site to prevent potential malware spread. Conduct a full antivirus scan using updated security software to detect and remove any malicious payloads. Monitor financial accounts and credit reports for unauthorized activity, as personal or payment information may have been compromised. Report the incident to relevant cybersecurity authorities or financial institutions to mitigate further risks. If any credentials were entered on the site, reset them immediately across all platforms where they may have been reused.