strabe-maut[.]digital

This domain, strabe-maut.digital, is identified as an active credential harvesting phishing site targeting users of financial services platforms. Analysis indicates the domain is currently operational and designed to collect sensitive login credentials through deceptive login portals mimicking legitimate banking or payment services. Infrastructure analysis reveals the domain was registered on June 26, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 62.60.226.180 and employs a Let's Encrypt SSL certificate to create an appearance of legitimacy. Detection metrics show the domain has been flagged by 1 of 95 security vendors on VirusTotal, while AlienVault OTX records it in a single threat intelligence pulse. The domain's creation date and minimal detection counts suggest it may be part of a recently deployed phishing campaign. The site remains active as of this analysis, posing an ongoing risk to users who may encounter it through phishing emails or malicious redirects. Organizations are advised to block the domain and associated IP address at the network level. Users should be alerted to avoid interacting with the site and to verify the authenticity of any financial service login portal before entering credentials. Security teams are recommended to monitor for related indicators, including the registrar and IP range, to identify potential campaign expansion.