auth-land[.]su

The domain auth-land.su was identified as a generic phishing site posing a risk of credential theft or unauthorized account access. No specific brand was impersonated, and no drainer kit was associated with this campaign. As of the latest verification, auth-land.su has been taken offline, though it previously operated as an active phishing page.

Technical analysis of auth-land.su revealed minimal detection at the time of investigation. The domain showed 0 of 95 VirusTotal vendors flagging it as malicious, and Google Safe Browsing did not list it as a threat. It appeared on one security blocklist, PhishDestroy, with a Gridinsoft trust score of 0/100. The domain was registered through INTERNET_TEHNOLOGY (ASN: 8342) and resolved to the IP address 81.177.22.153, located in Russia under AS8342 JSC RTComm.RU. No SSL certificate was present, and the observed page title read 'Домен заблокирован. Возможно срок действия домена закончился!'.

Individuals who may have interacted with auth-land.su should immediately change any credentials entered on the site, enable two-factor authentication on affected accounts, and monitor for signs of fraud or unauthorized access. Victims are advised to report the phishing domain to their email provider, local cybercrime authorities, or platforms like the Anti-Phishing Working Group (APWG) to aid in broader mitigation efforts.