tagesgeldkonto45[.]com

tagesgeldkonto45.com was registered on July 19 2026 through Dynadot Inc. The domain resolves to the IPv4 address 31.56.229.111 and uses the authoritative name servers ns1.dyna-ns.net and ns2.dyna-ns.net. As of the report date (July 21 2026) the domain is still active and appears on one public security blocklist. PhishDestroy has already added the domain to its blocklist, indicating that it is being used in a phishing campaign. VirusTotal scans show that 2 of 95 security vendors have flagged the domain as malicious, confirming that at least a minority of scanners recognize it as a threat. No additional public intelligence such as OTX tags, Safe Browsing entries, SSL certificate data, HTTP response codes, or page‑title information is currently available. The limited evidence points to a newly created infrastructure that is being leveraged for a generic phishing operation. The short lifespan—registration only two days prior to detection—suggests a fast‑flux or throwaway model typical of credential‑harvesting sites. Because the domain is hosted on a publicly reachable IP and is already listed by at least one blocklist, defenders should treat any traffic to or from 31.56.229.111 as suspicious. Recommended mitigation steps include adding the domain and its IP address to deny‑list rules on perimeter firewalls, DNS filtering solutions, and endpoint protection products. Continuous monitoring of the IP reputation and periodic re‑scans on VirusTotal or similar platforms are advised to capture any escalation in detection counts. Organizations that observe outbound connections to this domain should investigate for possible credential compromise and enforce multi‑factor authentication where feasible.