asn-i[.]ru

The domain asn-i.ru is a phishing site engaged in brand impersonation, specifically targeting Google. It operates as a tech-support scam rather than a crypto drainer, posing a risk of credential theft or fraudulent support interactions. As of the latest verification, asn-i.ru has been taken offline, but its prior activity remains a concern for users who may have encountered it.

Technical indicators for asn-i.ru show limited detection at this stage. The domain is registered through Cloudflare, Inc., though its creation date is not available. It resolves to the IP address 172.67.159.49, hosted on Cloudflare's infrastructure (AS13335) in the US. Security blocklists have flagged it on one list, PhishDestroy, while VirusTotal reports 0 of 95 vendors detecting it as malicious. Google Safe Browsing has not flagged the domain. The SSL certificate is issued by Google Trust Services / WE1, and observed technologies include Amazon Web Services, Cloudflare Browser Insights, and HTTP/3. The page title, 'Equalizer Exchange обзор: ключевой анализ,' suggests a localized or deceptive content strategy.

Users who suspect interaction with asn-i.ru should take immediate safety steps. If credentials were entered, change passwords for the affected accounts and enable two-factor authentication (2FA) where possible. Monitor accounts for unauthorized activity and report any fraudulent transactions. To aid in mitigation, victims can report the domain to Google Safe Browsing, PhishTank, or their local cybercrime authority. Additionally, sharing details with security communities or blocklist providers may help prevent further abuse.