online-zahlung-info[.]de

Analysis indicates that the domain online-zahlung-info.de is currently active and associated with a generic phishing campaign targeting users who may be lured into providing payment credentials. Google Safe Browsing classifies the site under social engineering, reflecting its use of deceptive techniques to harvest data. The domain appears on a single security blocklist, and PhishDestroy has also added it to its blocklist, confirming its malicious intent.

VirusTotal scans show that six of ninety‑one security vendors have flagged the domain as malicious, providing independent corroboration of its threat status. No additional intelligence such as registrar details, hosting IP, ASN, SSL configuration, or HTTP response codes is presently available, leaving the underlying infrastructure uncharacterized. Defenders should block network traffic to online-zahlung-info.de at perimeter devices, update URL filtering and DNS sinkhole lists to include the domain, and monitor for any outbound connections originating from internal hosts.

Incident response teams should treat any authentication attempts or credential submissions to this domain as compromised and initiate credential rotation. Continuous monitoring of threat intelligence feeds for new detections or changes in the domain’s classification is recommended.