mail[.]tatenengo[.]ru

Analysis of mail.tatenengo.ru as of August 07, 2026 indicates that the domain is actively used for generic phishing. DNS resolution points to the IPv4 address 159.194.237.112, which is currently listed on a single security blocklist. The same host is referenced by the PhishDestroy mitigation service, confirming that it has been observed delivering phishing content. VirusTotal has processed the domain in 91 security engines, of which nine returned positive detections, reinforcing the suspicion of malicious activity.

The detection ratio of 9/91 suggests that a minority of scanners have identified the domain as malicious, while the majority have not flagged it, possibly due to variations in scanning heuristics or recent changes in the payload. No additional context such as registrar information, ASN, or SSL certificate details is available in the supplied intelligence, limiting the ability to attribute the infrastructure to a specific actor or hosting provider. The lack of public page title or brand targeting data means that the exact phishing lures employed by the site remain unknown. Defenders should treat mail.tatenengo.ru as a high‑risk indicator.

Network‑level controls ought to block outbound connections to the address 159.194.237.112 and to any subdomains of mail.tatenengo.ru. Email gateways should be configured to flag messages that contain links to this domain, and endpoint security solutions should incorporate the domain into their block lists. Continuous monitoring of threat‑intelligence feeds for updates on additional detections, blocklist listings, or changes in the hosting environment is recommended to refine the response posture.