gofaster.digital

Analysis of gofaster.digital indicates an active phishing campaign targeting Russian-speaking users with a fraudulent messaging and task-management application. The domain was registered on December 28, 2025, through Dynadot Inc and currently resolves to the IP address 91.92.241.168. Cloudflare nameservers (abby.ns.cloudflare.com and anuj.ns.cloudflare.com) are in use, a common pattern observed in phishing infrastructure to obscure hosting origins and evade takedowns. At the time of assessment, two out of 95 security vendors on VirusTotal have flagged the domain, and it appears on one security blocklist, specifically PhishDestroy. The page title, "MAX – быстрое и легкое приложение для общения и решения повседневных задач," translates to a generic app promotion promising fast communication and daily task management, suggesting a lure designed to harvest credentials or distribute malicious software under the guise of a productivity tool. No specific brand impersonation is evident from the available data, and the exact phishing kit or payload remains unconfirmed. Defenders should prioritize blocking the domain and associated IP, monitoring for related Cloudflare-hosted domains registered via Dynadot, and alerting Russian-speaking user bases about the fraudulent app promotion. Further investigation into the hosting provider for 91.92.241.168 may reveal additional connected infrastructure.