gohusbantsol[.]xyz

This domain, gohusbantsol.xyz, is identified as a fake login phishing site designed to harvest user credentials. The page displays a deceptive prompt, "Nur einen Moment…," which is commonly used to mimic legitimate authentication portals. Victims who enter login details on such pages risk unauthorized account access, data theft, or further exploitation in targeted attacks. The domain does not host overt malware but relies on social engineering to compromise sensitive information. Analysis indicates the domain was registered on December 22, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with malicious infrastructure. VirusTotal detection shows 3 out of 95 security vendors flagging the domain as malicious, while Gridinsoft assigns a trust score of 0/100. The domain appears on one security blocklist and has been observed in five threat intelligence pulses on AlienVault OTX. It resolves to the IP address 188.114.97.3, which may be part of a larger hosting environment used for phishing campaigns. If you visited gohusbantsol.xyz and entered credentials, immediately revoke access to any accounts linked to the provided information. Change passwords using a secure device and enable multi-factor authentication where available. Monitor accounts for unauthorized activity, such as logins from unfamiliar locations or devices. If financial or sensitive data was exposed, consider reporting the incident to relevant authorities or identity protection services. Block the domain and its associated IP (188.114.97.3) at the network level to prevent further exposure.