prostitutki-tver[.]xyz

PhishDestroy identifies prostitutki-tver.xyz as a live credential theft domain currently under investigation. This website is designed to steal login details by impersonating a sensitive adult-services platform, tricking visitors into submitting personal information that attackers can later misuse for fraud or blackmail. The domain leverages a Let's Encrypt SSL certificate to appear legitimate, but its recent creation and low detection rate highlight its malicious intent. Anyone entering data on this site should immediately change passwords and monitor accounts for suspicious activity. This domain was flagged by PhishDestroy with the unique seed cff746. VirusTotal currently shows 0 detections out of 95 security engines, indicating it has evaded detection despite being active. The domain was registered on April 24, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, and resolves to IP 80.79.7.16. Its recent registration date and low detection rate suggest it is part of a fast-evolving campaign, likely targeting users searching for adult content or services in the Tver region. If you visited prostitutki-tver.xyz, cease any interaction immediately and avoid entering personal information. Check your accounts for unauthorized access, especially email, social media, or financial logins. Use a password manager to update compromised credentials securely and enable multi-factor authentication where possible. Report the domain to your security team or local cybercrime unit to help block future attacks.