love4heart[.]com

Analysis as of July 24, 2026 shows that love4heart.com is linked to a generic phishing campaign and is presently offline. The domain resolves to 178.33.33.187, an IP address hosted in France under ASN16276 belonging to OVH SAS. The web server identified is Nginx and the site presents a valid Let's Encrypt R13 TLS certificate, indicating that HTTPS was correctly configured before takedown. Nameserver delegation points to ns1.lealhost.com, ns2.lealhost.com and ns3.lealhost.ovh, all of which are consistent with the OVH hosting environment. Registration data reveal that the domain was created on February 21, 2026 and was registered through NiceNIC International Group Co., Limited.

Trust scoring from Gridinsoft assigns a zero out of one hundred, reflecting a high‑risk assessment. The domain appears on one security blocklist and is explicitly blocked by PhishDestroy, suggesting that major safe‑browsing feeds have flagged it as malicious. VirusTotal analysis reports that two out of ninety‑three security vendors flagged the domain, providing additional vendor‑level corroboration of abusive activity. The only observable page title, "Сайт love4heart.com создан!

/ love4heart.com has been created!", offers no insight into the malicious payload but confirms the site was operational at some point. No further details about phishing content, credential‑stealing forms, or targeted brands are available from the current intelligence set. Defenders should continue to block love4heart.com at DNS and network perimeter layers, ensure that intrusion‑detection signatures include its IP address and associated nameservers, and monitor the host for potential re‑use by other malicious actors. Ongoing vigilance is recommended, as the offline status does not preclude future activation.