vgostihotels[.]ru

Analysis of vgostihotels.ru shows the domain was registered on February 21, 2026 and is currently taken offline. The domain appears on a single security blocklist and has been flagged by PhishDestroy, indicating active mitigation by at least one anti‑phishing service. VirusTotal scans report that 8 of 93 security vendors identified the domain as malicious, demonstrating a moderate consensus among detection engines.

AlienVault Open Threat Exchange lists the domain in one threat‑intelligence pulse, confirming that it has been shared within the community as a phishing indicator. No additional evidence such as page title, SSL certificate details, hosting IP, ASN, or geographic location is available in the current intelligence set, leaving those infrastructure attributes unverified. The limited detection count and single blocklist entry suggest the domain’s exposure may be recent or narrowly targeted, but the presence in multiple detection sources justifies an elevated risk classification.

Defenders should ensure that vgostihotels.ru is added to outbound filtering rules, DNS blocklists, and any web‑gateway policies. Continuous monitoring of threat‑intel feeds for new references, as well as periodic re‑scans on platforms like VirusTotal, is recommended to capture any changes in the domain’s status or associated infrastructure. Given the offline status, any future re‑activation would likely resume the same phishing behavior, so proactive blocking remains essential.