datatilsynet-signering[.]com

datatilsynet-signering.com has been identified as a confirmed phishing site specifically targeting BankID credentials. The domain is currently offline, but its registration and hosting details indicate a clear intent to deceive users. The site impersonated the Norwegian Data Protection Authority (Datatilsynet) to lend legitimacy to the phishing attack, aiming to steal sensitive financial login information.

Technical analysis reveals that the domain was flagged by 17 out of 95 VirusTotal security vendors, indicating widespread detection across the cybersecurity community. It was registered through OwnRegistrar, Inc., a registrar often associated with malicious domains, and resolves to IP address 193.24.123.124. The domain was created on March 07, 2026, and is listed on one security blocklist. Notably, the site had no SSL certificate, a red flag for any legitimate service handling sensitive data. These indicators, combined with the brand impersonation, confirm the malicious intent behind this domain.

Although the site is now offline, users should remain vigilant. PhishDestroy advises that anyone who may have visited this domain or entered credentials should immediately change their BankID password and contact their financial institution. To avoid similar threats, always verify URLs carefully, look for SSL certificates, and avoid clicking on unsolicited links. For ongoing protection, use a reputable security solution that blocks known phishing domains.