mastodon[.]envio84264[.]pro

Analysis of mastodon.envio84264.pro shows a newly registered domain created on 2026-02-21 that is presently taken offline. The sole page title retrieved matches the full domain name, indicating no additional branding or content was observed. The site is listed on one security blocklist and has been explicitly blocked by PhishDestroy, confirming its classification as a phishing resource. SSL certificate details are reported as “WE1”, suggesting a self-signed or otherwise low‑trust certificate.

The Gridinsoft trust score of 0 / 100 further reflects extreme distrust. VirusTotal scans returned five positive detections out of ninety-three security vendors, reinforcing the malicious rating. No other infrastructure details such as IP address, ASN, or hosting provider are available in the supplied intelligence. The limited visibility leaves the hosting environment and any associated command‑and‑control infrastructure unconfirmed.

Defenders should immediately add mastodon.envio84264.pro to deny‑list rules across DNS filtering, web proxy, and endpoint protection solutions. Monitoring for any resolution attempts or outbound connections to the domain, despite its offline status, is advisable in case the site is re‑activated. Correlation with existing phishing campaigns targeting similar brand‑agnostic vectors may reveal broader actor activity. Continued re‑scanning of the domain on VirusTotal and inclusion in threat‑intel feeds will provide updates should additional detections appear.