mail[.]gmq[.]ndh[.]mybluehost[.]me

The domain mail.gmq.ndh.mybluehost.me is active and currently impersonates a legitimate email service, making it a potential vector for credential theft. It has received a notable VirusTotal score of 15 out of 95, indicating a concerning level of malicious activity associated with it. Such phishing attempts can trick users into providing sensitive login information, heightening the risk of compromised accounts.

This domain was registered through Domain.com - Network Solutions, LLC and has been operational for over nine years. It is hosted on an IP address (198.18.1.191) that is likely associated with shared hosting, which can enable multiple domains of dubious nature to coexist. The domain has been flagged on two blocklists, signaling its involvement in fraudulent schemes.

Currently, the domain remains active, and PhishDestroy has taken steps to monitor its activities closely. This includes ongoing reporting to relevant authorities to facilitate potential takedown efforts in the future. Vigilance against such phishing operations is crucial for protecting user data and maintaining online safety.