01e913e6-93dc-43b6-b2a3-cee1b5dc0ea4[.]selstorage[.]ru

The domain 01e913e6-93dc-43b6-b2a3-cee1b5dc0ea4.selstorage.ru was observed resolving to the IPv4 address 92.53.68.17, which is registered to JSC Selectel under ASN 49505. Geolocation places the host in Russia. No TLS certificate was presented on the host, indicating the service was reachable only via plain HTTP. The page title returned by the web server matches the full sub‑domain string, providing no additional context about the intended victim or content.

Infrastructure‑level indicators show a Gridinsoft trust score of 0 out of 100, reflecting a highly suspicious configuration. The domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed. VirusTotal analysis recorded detections from 16 of 95 scanning engines, reinforcing the classification as a phishing resource.

The domain is currently listed as offline, which may be a temporary takedown or an operational pause. Defenders should continue to block the IP address 92.53.68.17 and the full domain name at network perimeter devices, DNS resolvers, and endpoint filters. Ongoing monitoring is advised to detect any re‑activation or migration to alternative hosting, and any incident response teams should treat any future activity from this host as hostile, given the confirmed phishing detections and low trust metrics.