erkenntnisdestages[.]de

Analysis of erkenntnisdestages.de shows it is currently active and classified as a high‑risk brand‑impersonation site targeting the Twitter brand. The domain appears on two security blocklists and is listed in 17 AlienVault OTX pulses, indicating repeated malicious use. The page title returned by the server is “Erkenntnis des Tages – Eine Art Tagebuch”, which does not reference the target brand and suggests the site content has not been publicly verified.

Infrastructure inspection reveals the domain resolves to IP address 82.100.220.67, hosted in Germany and assigned to ASN 25394 (MK Netzdienste Verwaltungs GmbH). The web server reports Apache HTTP Server delivering a WordPress installation backed by MySQL and PHP. TLS is provided by a Let’s Encrypt certificate (R13), and the authoritative nameservers are ns1.goneo.de and ns2.goneo.de. HTTP response code is 200, confirming the site is reachable.

Threat intelligence metrics are uniformly negative. VirusTotal records 15 out of 95 security vendors flagging the domain, and both PhishDestroy and PhishingDB have blocked it. Reputation services assign a Gridinsoft trust score of 0 / 100 and a Scamadviser score of 1 / 100, reflecting extreme lack of trust. The domain’s primary malicious behavior is identified as impersonation of the Twitter brand, which aligns with the “brand_impersonation” classification in the provided data.

Defenders should treat erkenntnisdestages.de as malicious. Immediate actions include adding the domain to DNS and web‑filter blocklists, monitoring outbound connections to the associated IP, and, where possible, sinkholing traffic to prevent credential harvesting. Continuous re‑evaluation is advised, but given the current evidence—multiple blocklist listings, low trust scores, and confirmed brand impersonation—the domain poses a high risk to users attempting any interaction with Twitter‑related services.