finance-guide-germany[.]com

finance-guide-germany.com is currently flagged as a generic phishing site. The domain was registered on 30 October 2025 through Ascio Technologies, Inc and remains active as of 12 July 2026. No SSL certificate is associated with the host, and an HTTP request returns a 200 status code with the page title “Domainpark – Bitte den Rasen nicht betreten. Vielen Dank!”.

Network analysis shows the domain resolves to the IPv4 address 46.38.243.234, which belongs to the DE region and is advertised by AS197540 operated by netcup GmbH. The authoritative nameservers are root-dns.netcup.net, second-dns.netcup.net, and third-dns.netcup.net, confirming the hosting provider’s involvement. The lack of encryption suggests the site delivers its payload over clear‑text HTTP, simplifying interception for defensive tools.

Reputation services indicate the domain is listed on one security blocklist and has a Gridinsoft trust score of 0 out of 100, reflecting a high confidence of malicious intent. VirusTotal records a single positive detection out of 95 scanned vendors, and the domain is actively blocked by PhishDestroy. The combined indicators point to an intent to harvest credentials or deliver malicious content, consistent with the generic_phishing classification.

Defenders should add finance‑guide‑germany.com and its resolving IP 46.38.243.234 to network deny lists, enforce TLS inspection for outbound HTTP traffic, and monitor email gateways for messages containing the domain. Given the absence of a known target brand and the limited public analysis of the page content, analysts should continue to collect samples and perform content inspection to refine detection rules. Ongoing surveillance of the associated nameservers may reveal additional domains that share the same infrastructure.