Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@beget.ru.
The latest stored availability evidence still shows the domain reachable; 10 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
mail[.]tatenengo[.]ru
“Outlook”
Analysis of mail.tatenengo.ru as of August 07, 2026 indicates that the domain is actively used for generic phishing. DNS resolution points to the IPv4 address 159.194.237.112, which is currently listed on a single security blocklist. The same host is referenced by the PhishDestroy mitigation service, confirming that it has been observed delivering phishing content. VirusTotal has processed the domain in 91 security engines, of which nine returned positive detections, reinforcing the suspicion of malicious activity.
The detection ratio of 9/91 suggests that a minority of scanners have identified the domain as malicious, while the majority have not flagged it, possibly due to variations in scanning heuristics or recent changes in the payload. No additional context such as registrar information, ASN, or SSL certificate details is available in the supplied intelligence, limiting the ability to attribute the infrastructure to a specific actor or hosting provider. The lack of public page title or brand targeting data means that the exact phishing lures employed by the site remain unknown. Defenders should treat mail.tatenengo.ru as a high‑risk indicator.
Network‑level controls ought to block outbound connections to the address 159.194.237.112 and to any subdomains of mail.tatenengo.ru. Email gateways should be configured to flag messages that contain links to this domain, and endpoint security solutions should incorporate the domain into their block lists. Continuous monitoring of threat‑intelligence feeds for updates on additional detections, blocklist listings, or changes in the hosting environment is recommended to refine the response posture.
Threat Response Pipeline
Public Blocklist Status
Threat Intel Cross-Reference · source references
Technologies · 2 identified
Apache is a free and open-source cross-platform web server software.
httpd.apache.org 100% confidenceVirusTotal Analysis
Archived Evidence
Site Performance Analysis
Google PageSpeed Insights — mobile performance audit of mail.tatenengo.ru · checked Aug 7, 2026
Evidence & External Reports
PD-20260807-44E9CD Recipient: abuse@beget.ru Were You Affected by This Site?
If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.
Report to Your Local Authorities
Select your country to get official cybercrime contacts, or create a complaint draft →.
Check Any Domain
Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence
Scan NowReport Phishing
Submit suspicious domains to our threat database — protect the community
ReportLive Threat Feed
Recent phishing reports and observed availability changes
MonitorStay Informed, Stay Safe
Monitor live threats or contest this listing if you believe it's a false positive