autoscout24-anfrage719861[.]colegiointeragirfsa[.]com

The domain autoscout24-anfrage719861.colegiointeragirfsa.com is identified as a high-risk credential phishing site targeting Autoscout24 users. Analysis confirms this domain was actively impersonating the legitimate automotive marketplace platform to harvest login credentials, as evidenced by its page title, "AutoScout24 - Loggen Sie sich hier ein," which mimics the official login interface. The domain is currently offline, though prior activity indicates it was operational for malicious purposes. Technical indicators reveal the domain was registered on January 10, 2023, through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolved to the IP address 108.179.253.83, hosted within AS19871 (Network Solutions, LLC) in the United States. Security telemetry shows the domain was flagged by 23 of 95 vendors on VirusTotal, with Google Safe Browsing explicitly categorizing it as phishing. Additional threat intelligence sources confirm its presence on one security blocklist, and it was actively blocked by endpoint protection systems. The SSL certificate, issued by Let’s Encrypt (R12), provided a false sense of legitimacy while facilitating encrypted communication for credential interception. Current status indicates the domain has been taken offline, though residual risk remains for users who may have interacted with it during its active period. Organizations and individuals are advised to monitor for unauthorized access to Autoscout24 accounts, particularly those accessed between January 2023 and the domain’s deactivation. Network administrators should block the domain and its associated IP (108.179.253.83) at the perimeter, while endpoint protection rules should be updated to include this indicator of compromise. Users who entered credentials on this site should immediately reset passwords and enable multi-factor authentication on their Autoscout24 accounts. Security teams are encouraged to review logs for connections to the domain or IP to identify potential compromise.