ms-yourdocumentishere[.]thsite[.]top

The domain ms-yourdocumentishere.thsite.top was registered on August 29, 2022 through NAMECHEAP INC and is served by the authoritative name servers ns1.byet.org and ns2.byet.org. DNS resolution points to the IPv4 address 185.27.134.166, which remains the active hosting endpoint as of the report date, July 23, 2026. The domain is currently listed as active and has been observed on a single security blocklist. PhishDestroy, a specialized anti‑phishing service, has explicitly blocked the domain, indicating that at least one reputable vendor has identified it as malicious.

No additional detection counts, Safe Browsing verdicts, or Open Threat Exchange (OTX) entries are provided in the available intelligence, and no SSL certificate details or HTTP response codes have been recorded. Consequently, the presence or absence of TLS encryption, redirection behavior, and page content remain uncertain. The lack of a disclosed page title or brand targeting further limits attribution of the phishing campaign’s specific lure.

Nonetheless, the combination of recent registration, use of a free hosting provider, and confirmation of blocklist inclusion warrant heightened vigilance. Defenders should add the domain and its associated IP address to network‑level deny lists, monitor DNS queries for the domain, and enforce outbound filtering to prevent credential submission to this host. Continuous re‑evaluation is advised, as additional telemetry such as HTTP status, certificate fingerprint, or page analysis could refine the risk assessment and support targeted remediation.