mail-matelilink.appwrite.network

This domain, mail-matelilink.appwrite.network, is flagged as an active credential phishing threat with a high-risk classification as of July 12, 2026. Infrastructure analysis reveals the domain was registered on March 6, 2026, and is hosted on IP 151.101.131.52, associated with AS54113 (Fastly, Inc.) in the United States. The domain currently returns an HTTP 403 status, indicating restricted access or a potential cloaking mechanism to evade detection. The page title, 'Sign In,' suggests an attempt to mimic a legitimate authentication portal, though the exact content and targeted brand remain unconfirmed due to the lack of direct visibility into the site. The domain appears on at least one security blocklist (PhishDestroy) and has been assigned a trust score of 0/100 by Gridinsoft, reinforcing its malicious classification. Fifteen of ninety-five security vendors on VirusTotal have flagged this domain, providing further evidence of its suspicious nature. The SSL certificate is issued by Certainly, a provider commonly used for both legitimate and malicious domains, offering no definitive indication of intent. Defenders should treat this domain as an active phishing threat. Immediate action includes blocking resolution at the DNS or network level, monitoring for internal access attempts, and reviewing logs for connections to 151.101.131.52. Given the domain's registration under Fastly and its use of a content delivery network, defenders should also assess whether other domains on the same infrastructure exhibit similar patterns. No evidence currently links this domain to a specific phishing kit or targeted brand, so further analysis of captured payloads or redirects is recommended if available.