regional-vestnik[.]site

regional-vestnik.site was registered through Name.com, Inc. on July 19 2026 and remains active as of the report date July 24 2026. DNS resolution points to the single IPv4 address 152.42.199.253, and the domain is served by four name servers (ns1glr.name.com, ns2btz.name.com, ns3gnv.name.com, ns4htz.name.com). The address has been flagged by the PhishDestroy mitigation service and appears on one external security blocklist, indicating that at least one trusted feed has observed malicious activity associated with the host.

No additional public intelligence such as Safe Browsing or Open Threat Exchange entries is currently available, and no SSL certificate details or HTTP response codes have been published. The lack of visible page title or brand references limits the ability to confirm the exact phishing campaign or lure employed, so the precise payload or credential‑stealing technique remains unknown. Nevertheless, the combination of recent registration, single‑IP hosting, and active blocklist entries aligns with typical infrastructure used for short‑lived phishing campaigns.

Defenders should consider adding regional-vestnik.site to local deny lists, enforce DNS sinkholing for the resolved IP, and monitor traffic for connections to 152.42.199.253. Continuous re‑query of reputation services is advised to detect any future changes, such as the appearance of additional detections or the deployment of SSL certificates. Given the active status and existing blocklist entry, the domain should be treated as high‑risk until further evidence proves otherwise.