mail[.]devices-detect[.]us

The domain mail.devices-detect.us is classified as a generic phishing threat with elevated risk. No specific brand name or drainer kit is associated with this domain. Infrastructure analysis reveals that the domain resolves to IP address 162.144.180.56 and is secured with a Let's Encrypt SSL certificate. The unique seed dc04bf has been assigned to this investigation. The domain is currently active, posing an ongoing risk to users who may receive phishing emails or visit fraudulent login pages.

Technical indicators: VirusTotal detection score of 6/95, indicating moderate but notable malicious reputation. The registrar is not publicly listed in the provided intelligence; creation date is not specified. The domain is not listed on Google Safe Browsing (GSB) at the time of analysis. Blocklist status is unconfirmed, but the elevated risk level suggests potential inclusion in community or proprietary blocklists. The IP address 162.144.180.56 is hosted by Unified Layer, a common provider for low-cost hosting often abused by threat actors.

Current status: active. Recommended response actions include blocking the domain at email gateways and web proxies, monitoring for related subdomains or IP ranges, and reporting to threat intelligence platforms. Remaining risk is moderate due to the domain's active status and lack of GSB listing, which may delay detection by mainstream browsers. Users should be advised to avoid clicking links from unsolicited emails referencing this domain and to verify any unexpected security alerts independently.