drevodommima[.]sk

Analysis of drevodommima.sk shows that the domain is actively hosted on the IP address 37.9.175.133 and uses the Websupport s.r.o. name‑server set ns1.websupport.sk, ns2.websupport.sk, ns3.websupport.sk. The registration date of 4 February 2021 and the continued active status indicate a stable infrastructure that has been maintained for over five years. VirusTotal reports three detections out of ninety‑one scanners, confirming that at least a subset of security products classify the site as malicious. The limited detection count, combined with the lack of publicly available page content, suggests the domain is employed for generic phishing campaigns rather than a targeted brand impersonation. No additional intelligence such as ASN, country, or payload details is available, leaving the exact phishing vector and victim profile uncertain. Defenders should treat the domain as high‑risk, block network resolution to 37.9.175.133, and add the domain to URL filtering and email security policies. Continuous monitoring of DNS queries and passive DNS feeds is recommended to detect any future re‑hosting or changes to the name‑server configuration. Given the active status and observed malicious detections, the domain should be considered a confirmed phishing source pending further forensic investigation.