infoinst[.]ru

The domain infoinst.ru was identified as a generic phishing site posing an elevated risk. It did not impersonate a specific brand or deploy a crypto drainer kit. As of the latest verification, infoinst.ru has been taken offline, reducing immediate exposure to potential victims.

Technical analysis of infoinst.ru revealed limited but notable detection. The domain was flagged by 3 of 95 security vendors on VirusTotal, including ADMINUSLabs, ESET, and Gridinsoft, which assigned it a trust score of 1 out of 100. It appeared on one security blocklist, PhishDestroy, while Google Safe Browsing did not flag it. The domain was registered through HOSTING (ASN: 29182) and resolved to the IP address 195.140.145.170, located in Russia under AS29182 JSC IOT. The SSL certificate was issued by Let's Encrypt (R12), and the observed page title was 'Главная'. Detected technologies included Node.js, Vue.js, Nuxt.js, and Nginx. Nameservers for infoinst.ru were ns1.reg.ru and ns2.reg.ru.

Individuals who may have interacted with infoinst.ru should take immediate steps to secure their accounts. Since this was a generic phishing site, victims should change passwords for any accounts accessed or credentials entered on the site, enable two-factor authentication (2FA) where available, and monitor accounts for unauthorized activity. Reporting the domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities can help prevent further abuse. If financial or cryptocurrency details were exposed, contact relevant institutions to flag potential fraud.