confirmacion-personal-email2026[.]hstn[.]me

The domain confirmacion-personal-email2026.hstn.me remains active as of the report date, July 21, 2026, and is classified as a generic phishing threat with a high risk rating. Registration data indicates the domain was created on June 03, 2019 and is managed through Porkbun LLC, a registrar known for low‑cost bulk registrations. The domain resolves to the IP address 185.27.134.232, which is associated with the hosting provider that supplies the ZeroSSL ECC DV SSL CA 2 certificate issued by ZeroSSL GmbH. The presence of a valid TLS certificate does not mitigate the malicious intent, as the certificate is publicly available and can be obtained by any applicant. Infrastructure analysis shows that the domain’s authoritative nameservers could not be resolved (NS_NOT_FOUND), suggesting that DNS records may be deliberately obscured or that the domain relies on dynamic DNS services.

Threat intelligence sources have placed the domain on a single security blocklist, and PhishDestroy has explicitly blocked it. VirusTotal scans report five detections out of ninety‑five scanners, confirming that multiple security engines have identified malicious behavior linked to the domain. No additional public analysis, such as page titles or observed brand impersonation, is available at this time, leaving the exact phishing lure undefined. Defenders should treat any traffic to this domain as hostile, block the domain at network perimeter devices, and monitor DNS queries for the associated IP address. Because the domain’s hosting and certificate infrastructure are readily obtainable, threat actors can rapidly redeploy similar domains; continuous monitoring of newly registered sub‑domains under the hstn.me zone is advised.