mailhost[.]goteal[.]io

This report analyzes the domain mailhost.goteal.io, which is currently offline and presents a moderate risk. Based on the available data, the specific nature or brand of any scam or fraudulent scheme hosted on this domain cannot be determined, as no page title or content was provided. The primary threat posed is its presence on threat blocklists, indicating it has been associated with malicious activity, such as hosting malware, phishing content, or serving as a command-and-control endpoint.

Technical evidence shows the domain was flagged by 10 out of 95 VirusTotal vendors, including ADMINUSLabs, alphaMountain.ai, CRDF, CyRadar, and Forcepoint ThreatSeeker. It appears on one blocklist. The domain is registered through GoDaddy.com, LLC with nameservers pdns03.domaincontrol.com and pdns04.domaincontrol.com. It was created on 2016-06-28 and resolves to IP address 52.44.87.47, located in the United States and hosted on AWS EC2 in the us-east-1 region.

The domain is currently down or offline, reducing immediate risk. However, given its inclusion on security vendor blocklists and a domain risk score of 73 out of 100, it represents a moderate threat. Organizations should block this domain and its associated IP to prevent potential connections to malicious infrastructure.