cyber-connects[.]xyz

The domain cyber-connects.xyz is a generic phishing site that posed as a legitimate business offering antique watch repair and restoration services, as indicated by its page title in Russian. It was designed to deceive visitors into providing sensitive information, though no specific brand or drainer kit was identified. The site has been taken offline, but its prior activity represents an elevated risk for users who may have interacted with it.

Technical indicators for cyber-connects.xyz include a detection rate of 1 of 95 VirusTotal vendors, with only Forcepoint ThreatSeeker flagging it. Google Safe Browsing did not flag the domain. It appears on three security blocklists: PhishDestroy, ScamSniffer, and CryptoFirewall. The domain is registered through ripencc and resolves to IP address 80.87.203.190, located in RU (AS29182 JSC IOT). No SSL certificate was issued, and the domain has one nameserver. Gridinsoft and Scamadviser trust scores are 0/100 and 1/100, respectively, indicating very low trustworthiness.

Users who visited cyber-connects.xyz should take immediate safety steps. Since this is a generic phishing site, change any passwords entered on the site and enable two-factor authentication on all accounts. Monitor financial accounts for unauthorized activity. Report the domain to authorities such as the Anti-Phishing Working Group or your local cybercrime unit. If any cryptocurrency was involved, revoke token approvals and move funds to a new wallet.