log[.]evergreenhostingoptions[.]de

The domain log.evergreenhostingoptions.de has been identified as a generic phishing site. No specific brand impersonation or crypto drainer kit has been detected. The domain appears to be a test page for an HTTP server, which could be indicative of an initial setup phase for a more sophisticated phishing campaign.

Infrastructure analysis reveals that the domain has a VirusTotal detection score of 5/95, indicating that it has been flagged by a small number of security vendors. The domain is registered with Let's Encrypt and resolves to the IP address 172.67.215.104. It was created on June 14, 2026, and currently appears on 1 security blocklist. The page title, 'Test Page for the HTTP Server on AlmaLinux,' suggests that the server might still be in a configuration stage or has been left in a default state post-takedown.

The domain is currently offline, which may indicate that it has been taken down by the hosting provider or the attackers. Despite its offline status, the domain remains a potential threat and should be monitored for复活. Security teams are advised to block this domain at the network level and monitor for any related activity. The remaining risk is considered elevated due to the domain's presence on a security blocklist and the potential for future misuse.