de2095[.]deinesparangebote[.]de

Analysis conducted on August 04, 2026 indicates that the domain de2095.deinesparangebote.de is actively being used in a generic phishing campaign. The domain has been flagged by the PhishDestroy remediation service and appears on a single public security blocklist, confirming that at least one external provider has observed malicious activity associated with the host. No additional telemetry such as DNS reputation scores, SSL certificate details, HTTP status codes, or WHOIS registration data has been disclosed in the current intelligence set, leaving the broader infrastructure characteristics—including hosting provider, IP address, ASN, and registration age—undetermined.

The lack of a published Safe Browsing verdict further limits the ability to leverage browser‑based reputation signals. Because the available data do not identify a targeted brand, phishing kit, or specific lure, the precise attack vector remains unknown.

Defenders should therefore enforce blocklisting of de2095.deinesparangebote.de across perimeter firewalls, web proxies, and endpoint URL filtering solutions, and monitor DNS queries for any resolution attempts that may indicate lateral movement or additional payload delivery. Continuous observation of threat intelligence feeds for new indicators—such as additional blocklist listings, detection by sandbox analysis platforms, or emerging reputation scores—will be essential to refine the risk assessment as more evidence becomes available.