gutschein[.]service4pb[.]de

This domain, gutschein.service4pb.de, poses as a legitimate Facebook-related promotion to harvest user credentials. The site displays a deceptive Postbank-themed landing page, tricking visitors into entering sensitive login information under the false pretense of a rewards or verification process. Such impersonation tactics are commonly used to compromise accounts, leading to unauthorized access, data theft, or further malicious activities like spam propagation or financial fraud. Analysis indicates this domain is a confirmed threat, with 16 out of 95 security vendors on VirusTotal flagging it as malicious. The domain resolves to the IP address 145.239.235.69, hosted on infrastructure belonging to OVH SAS (AS16276) in Germany. It appears on two security blocklists and was actively blocked by multiple threat intelligence feeds. The page title, 'Postbank Landingpage,' further confirms the intent to mislead users by leveraging a trusted brand name unrelated to Facebook, increasing the likelihood of successful deception. If you visited gutschein.service4pb.de or interacted with its content, immediate action is required. First, change the passwords for any accounts accessed after visiting the site, prioritizing Facebook and email credentials. Enable multi-factor authentication on all critical accounts to prevent unauthorized access. Monitor linked accounts for suspicious activity, such as unauthorized logins or messages sent without your consent. If financial information was entered, contact your bank to report potential fraud and consider placing a fraud alert on your credit file. Finally, scan your device for malware using up-to-date security tools to ensure no additional compromise has occurred.