spoti-fy[.]s1027464[.]ha003[.]t[.]mydomain[.]zone

Analysis of spoti-fy.s1027464.ha003.t.mydomain.zone shows a confirmed phishing indicator set as elevated risk. The domain resolves to IP 195.58.48.8, which is registered to AS51659 (Baxet, Russia) and was allocated through the BG‑NETWORK registrar. No SSL certificate is present, and the site is currently taken offline, limiting direct inspection of its content. VirusTotal scans have flagged the domain in 14 of 95 security vendor engines, demonstrating broad detection across multiple anti‑malware products.

The domain appears on one public blocklist and is actively blocked by PhishDestroy, reinforcing the consensus that it is malicious. Gridinsoft assigns a trust score of 0 out of 100, indicating extreme distrust. The page title returned by the server is identical to the domain name, providing no additional context about the targeted brand or payload.

Because the site is offline, the exact phishing technique, lure page, or credential harvesting method cannot be confirmed at this time. Defenders should immediately add the domain and its resolved IP address to network‑level deny lists, enforce DNS filtering for the .mydomain.zone suffix, and monitor for any related sub‑domains that may be provisioned under the same registrar or ASN. Continuous re‑scanning of the IP and periodic checks of VirusTotal or similar aggregators are advised to capture any future activity or re‑hosting attempts.