docs[.]social-momentum[.]de

The domain docs.social-momentum.de is a phishing site engaged in brand impersonation, specifically targeting Microsoft. It presents itself as a login portal to deceive users into entering credentials, posing an elevated risk of credential theft. No crypto drainer kit was identified. The site is currently taken offline, but prior activity indicates it was actively used for phishing scams.

Technical analysis of docs.social-momentum.de reveals limited but notable detection. The domain was flagged by 2 of 95 security vendors on VirusTotal, including ChainPatrol and SOCRadar, and appears on 1 security blocklist (PhishDestroy). It resolved to the IP address 167.235.239.27, hosted by Hetzner Online GmbH in Germany (AS24940). The nameservers were helium.ns.hetzner.de, hydrogen.ns.hetzner.com, and oxygen.ns.hetzner.com. No SSL certificate was present, and the observed page title was 'sᴏᴄɪᴀʟ ᴍᴏᴍᴇɴᴛᴜᴍ ᴅᴏᴄs – Anmelden - Outline'. Registrar and creation date details are not available.

Users who may have interacted with docs.social-momentum.de should immediately change any passwords entered on the site, particularly for Microsoft accounts. Enable two-factor authentication (2FA) on all critical services to mitigate further risk. Monitor accounts for unauthorized activity and report any suspected fraud to the impersonated brand (Microsoft) and relevant authorities. To report the phishing domain, submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity incident response teams.