mail[.]web-hive[.]com

Analysis of mail.web-hive.com indicates an active high-risk infrastructure used for brand-impersonation targeting the "base" brand. The domain was registered on 1 February 2009 through GoDaddy.com, LLC and continues to resolve to the IPv4 address 148.66.136.215, which is allocated to AS26496 (GoDaddy) in Singapore. DNS resolution is served by Cloudflare nameservers neil.ns.cloudflare.com and princess.ns.cloudflare.com. The site presents a valid TLS certificate from Let’s Encrypt (R12) and returns HTTP 200, suggesting a fully functional web server. Public threat-intel sources list the domain on one security blocklist and it is specifically blocked by PhishDestroy. VirusTotal scans show 7 of 95 security vendors flag the domain, and an independent Gridinsoft trust score rates it 0/100, reinforcing the malicious assessment. The page title reported by the crawler is "WebHive Technologies", and the listed scam type is "Crypto Scam", indicating that the site may be used to lure victims into cryptocurrency-related fraud. The combination of brand-impersonation, a low trust score, and detections by multiple vendors justifies the high-risk rating. Defenders should treat any traffic to mail.web-hive.com as malicious. Blocking the domain at perimeter firewalls, DNS filters, and proxy layers is recommended. Continuous monitoring of the associated IP address (148.66.136.215) and related Cloudflare name-server entries is advised, as the infrastructure could be leveraged for additional campaigns. Because the site is still active, incident response teams should consider outreach to the hosting registrar and relevant takedown services for remediation.