datagram-network[.]xyz

The domain datagram-network.xyz was registered on November 17, 2025 through NiceNIC International Group Co., Limited and is currently resolved to the IP address 95.214.235.117, which belongs to the Autonomous System AS30860 operated by Virtual Systems LLC in Ukraine. The authoritative nameservers ns13.v-sys.org and ns14.v-sys.org are consistent with the hosting provider. No TLS certificate is presented for the site, indicating that communications are unencrypted and that the domain does not support HTTPS. The HTTP response returned a generic index page with the title "Index of /", providing no functional content for analysis.

Reputation metrics are uniformly negative: Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on two independent security blocklists. VirusTotal scans show that 13 of 95 antivirus and URL‑reputation engines flagged the domain as malicious, reinforcing the suspicion of abusive activity. Additional blocklist evidence includes explicit listings by PhishDestroy and ScamSniffer, both of which specialize in phishing mitigation. The overall risk assessment is elevated, and the site status is recorded as offline at the time of reporting.

Defenders should continue to block the domain at perimeter defenses, update threat‑intelligence feeds with the observed indicators of compromise, and monitor any future DNS resolutions that may point to the same hosting infrastructure. Because the page content is limited to an empty directory listing, further behavioral analysis is not possible, and the precise phishing payload or target audience remains unknown. Ongoing observation of the IP address and associated AS for new domain registrations or similar activity is recommended to pre‑empt potential re‑use of the infrastructure.