privatestress[.]ru

Analysis indicates that privatestress.ru is an active credential phishing infrastructure. The site returns HTTP status 403 and presents the page title "Privatestress.ru — Professional Load Testing," suggesting a deceptive front‑end. DNS resolution points to IP 172.67.216.206, hosted by Cloudflare (location Canada) and served under a Let's Encrypt/E7 certificate. The domain is delegated to the nameservers vasilii.ns.cloudflare.com and zariyah.ns.cloudflare.com. Registration was performed through REGRU-RU on April 14, 2026. Threat intelligence assigns a scam type of Credential Phishing, with a Gridinsoft trust score of 0/100 and a Scamadviser score of 21/100, reflecting a high likelihood of malicious intent. VirusTotal records a single positive detection out of 94 scanning engines, and the domain appears on one blocklist, specifically PhishDestroy. Detected technologies include Cloudflare Browser Insights, Cloudflare, and HTTP/3, consistent with the hosting provider. While the exact phishing payload or targeted credentials are not disclosed, the combination of a misleading load‑testing title, low trust scores, and blocklist presence confirms the domain's malicious purpose. Defensive actions should include immediate DNS and URL blocking, monitoring for traffic to 172.67.216.206, and updating intrusion detection signatures to flag any HTTP/3 connections to this host. Organizations should also advise users to avoid interacting with links referencing privatestress.ru and to enforce credential hygiene policies.