The domain mail.phone-cloud.site was registered through EuroDNS S.A. on July 02, 2026 and is currently active. Infrastructure analysis shows the domain resolves to the IP address 108.167.146.200 and uses the authoritative nameservers cns43.webhostbox.net and cns44.webhostbox.net, indicating hosting on a shared web service platform. VirusTotal scans have recorded 10 of 91 security vendors flagging the domain as malicious, reinforcing the suspicion of abuse.
Independent phishing intelligence feeds have added the domain to the blocklists of PhishDestroy and OpenPhish, and it appears on two additional security blocklists, demonstrating that multiple downstream security products are already enforcing mitigation. No public SSL certificate details, HTTP status codes, Safe Browsing verdicts, or page title information have been disclosed, so the exact content served by the site remains unverified. Defenders should block resolution of mail.phone-cloud.site at the network perimeter, enforce DNS filtering of the associated IP 108.167.146.200, and monitor the listed nameservers for future sub‑domain activity.
Continuous re‑scanning of the domain on multi‑vendor platforms is advised to capture any changes in detection scores. Organizations that rely on email authentication should treat any messages claiming to originate from this domain as fraudulent and advise users to avoid credential submission.