emailanalytics[.]com[.]ua

The domain emailanalytics.com.ua is currently active and has been observed in a phishing context. Registration data shows it was created on September 23, 2025 by the Ukrainian entity ТОВ "ОН-ЛАЙН" and is hosted on the IP address 185.86.79.95. DNS resolution is served by Cloudflare name servers ines.ns.cloudflare.com and yew.ns.cloudflare.com, indicating the use of a reputable CDN for concealment and resilience. VirusTotal analysis reports that 19 of 91 security vendors flag the domain as malicious, confirming a consensus of detection across multiple scanning engines.

The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy service, demonstrating that at least one dedicated anti‑phishing platform has taken mitigation action. No public evidence has been provided regarding Safe Browsing status, Open Threat Exchange (OTX) listings, SSL certificate details, HTTP response codes, trust‑score metrics, page title, or additional evidence links, leaving those aspects unverified at this time. The lack of publicly disclosed page content or brand targeting means that the exact phishing lure cannot be confirmed, but the classification as generic phishing is supported by the detection count and blocklist presence. Defenders should add emailanalytics.com.ua to domain‑based blocklists across email gateways, web proxies, and endpoint protection solutions.

Continuous monitoring of the IP address 185.86.79.95 for any new malicious activity is advised, as well as periodic re‑scanning with VirusTotal or similar multi‑engine services to capture any changes in detection posture. Organizations using Cloudflare’s DNS filtering can consider adding the domain to their deny list. Incident response teams should treat any communications originating from or referencing this domain as potentially fraudulent and investigate associated user reports accordingly.