# mailer.goteal.io — MALICIOUS

> PhishDestroy identifies mailer.goteal.io as a live phishing domain with 10/95 VirusTotal detections targeting email users. Check the full report.

## Summary
PhishDestroy identifies mailer.goteal.io as an active phishing domain posing as a legitimate email service to steal login credentials from unsuspecting users. The domain mimics trusted email platforms, luring victims into entering personal information under false pretenses. Security researchers have confirmed this is not an isolated incident but part of a broader campaign targeting corporate and personal email accounts.  This domain was flagged by 10 out of 95 VirusTotal security vendors, indicating elevated risk and active abuse. Registered through GoDaddy.com, LLC on June 28, 2016, the domain resolves to IP address 52.44.87.47 and holds an SSL certificate issued by Amazon, which may deceive users into trusting its legitimacy. The combination of an aged domain registration and a high-risk SSL certificate makes this a particularly deceptive threat.  If you visited mailer.goteal.io, do not enter any credentials or personal information. Disconnect from the site immediately and run a full antivirus scan on your device. Report the domain to your email provider and consider changing passwords for accounts accessed after visiting this page. Monitor financial accounts closely for suspicious activity and alert your IT department if this appears in a corporate environment.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2016-06-28 16:28:52
- Registrar: GoDaddy.com, LLC
- IP: 52.44.87.47

## Detection Status
- VirusTotal: 10 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d7662057-9f78-42fb-b8db-32fbfbaed6f9
- PhishDestroy: https://phishdestroy.io/domain/mailer.goteal.io/
- LLM endpoint: https://phishdestroy.io/domain/mailer.goteal.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/mailer.goteal.io/
Last updated: 2026-03-23