documentgosuslugi[.]com

The domain documentgosuslugi.com was registered through Fewmoretaps OU d/b/a Trustname.com and first observed on August 04, 2026. Within two days of registration the domain appeared on a single security blocklist and was subsequently flagged by the PhishDestroy mitigation service. Technical resolution shows the domain mapping to the IP address 172.67.208.117, indicating that the hosting infrastructure is shared with other services but providing no direct attribution to a known malicious operator.

VirusTotal records indicate that the domain has been scanned by 91 independent vendors; at the time of analysis none of those scanners reported a detection, a fact that does not constitute evidence of benign intent and should be interpreted as a lack of current signatures rather than a validation of safety. The current threat classification is listed as generic phishing, and the operational status remains active while the risk level is marked as under investigation. Observable data is limited to registration details, blocklist presence, the single IP resolution, and the PhishDestroy block; no public information on SSL certificates, HTTP response codes, page titles, or content has been disclosed.

Consequently, defenders should treat the domain as a confirmed phishing infrastructure, enforce network‑level blocks, add the domain to internal blocklists, and monitor the associated IP for any additional malicious activity. Ongoing surveillance of VirusTotal and other reputation services is advised to capture any future detections that may arise as threat signatures evolve.