russ-pasports[.]com

The domain russ-pasports.com was found to be hosting a generic phishing operation designed to trick visitors into revealing sensitive information. The page title, which reads in Russian 'Is it possible to buy poison for a person on the Internet?', suggests the site may have been used for malicious or fraudulent purposes, potentially involving scams or credential theft. PhishDestroy has confirmed the domain is now offline, but its previous activity posed a significant risk to anyone who may have interacted with it.

Evidence of the threat comes from multiple security sources. VirusTotal shows that 2 out of 95 security vendors flagged the domain as malicious, indicating a consensus among cybersecurity tools. The domain was created on March 27, 2026, and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar sometimes associated with questionable domains. It resolved to IP address 185.110.47, and the SSL certificate was issued by Let's Encrypt, which is commonly used by legitimate sites but also by phishers. Additionally, the domain appeared on one security blocklist and was found in one AlienVault OTX threat intelligence pulse, further confirming its malicious nature.

If you visited russ-pasports.com, it is important to take immediate action. Do not enter any personal information, passwords, or financial details. Change passwords for any accounts that may have been compromised and enable two-factor authentication where possible. Run a full security scan on your device using reputable antivirus software. Monitor your accounts for unusual activity and report any suspicious transactions to your bank or service provider. For additional support, refer to official cybersecurity resources or consult with a professional. Stay vigilant and avoid interacting with unknown or suspicious websites in the future.