mail[.]testhometest[.]s-host[.]net

This domain mail.testhometest.s-host.net remains active with resolution to IP 185.253.218.120 in UA under AS202302 NETH LLC. Nameservers listed are ns1.s-host.com.ua ns2.s-host.com.ua ns3.s-host.com.ua ns4.s-host.com.ua. The domain was registered on December 12 2014 via Center of Ukrainian Internet Names (UKRNAMES) and currently uses an SSL certificate from Let's Encrypt R12 with an HTTP status code of 301. These registration and infrastructure details establish a long operational history without recent creation anomalies. The IP and nameserver configuration provide concrete points for network-level tracking.

Detection evidence shows the domain on 2 security blocklists with a Gridinsoft trust score of 0/100. VirusTotal results indicate 18 out of 95 vendors flag the domain while specific blocks are recorded from PhishDestroy and PhishingDB. The assigned threat type is generic_phishing at high risk level with the status confirmed active on the report date of July 12 2026. These metrics derive directly from aggregated intelligence sources and do not rely on unverified assumptions.

The documented page title is Мобильная версия ВКонтакте. Content details beyond this title have not undergone direct examination leaving the precise payload structure uncertain. Infrastructure analysis reveals consistent resolution and blocklist presence over time without contradiction in the provided records.

Defenders should implement IP-based blocks for 185.253.218.120 and monitor queries to the listed nameservers. Regular status checks on the domain are advised to track any changes in activity or additional detections. This approach focuses on verifiable observables to limit exposure while further intelligence is collected.