Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 7 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
sparkassebayreuth[.]com
“Internet-Filiale - Sparkasse Bayreuth”
Riepilogo delle prove
This domain, sparkassebayreuth.com, is flagged for brand impersonation phishing targeting Apple users. Analysis indicates the site masquerades as a legitimate financial portal, specifically replicating the interface of Sparkasse Bayreuth, a German banking institution. Despite its misleading page title, 'Internet-Filiale - Sparkasse Bayreuth,' the domain is designed to deceive users into divulging Apple-related credentials or financial information, leveraging the trust associated with the impersonated brand.
Technical indicators confirm elevated risk: the domain is registered through Deutsche Telekom AG and was created on April 03, 2008. It resolves to IP address 195.140.52.199, hosted in Germany under AS9099 (Finanz Informatik GmbH & Co. KG). The domain appears on one security blocklist, and VirusTotal reports 17 out of 95 security vendors flagging it as malicious. The SSL certificate is issued by Let's Encrypt (serial number E7), a common tactic to lend false legitimacy to phishing sites. No evidence of a drainer kit was identified, but the infrastructure aligns with credential-harvesting campaigns.
As of the latest assessment, sparkassebayreuth.com has been taken offline, likely due to intervention by security providers or hosting authorities. However, residual risk persists due to the domain's historical use and potential for reactivation. Organizations are advised to monitor for DNS reactivation attempts, block the IP address 195.140.52.199 at the network level, and update endpoint protection rules to include this domain and its associated indicators. Users should be educated on recognizing brand impersonation tactics, particularly those involving financial institutions or trusted technology brands.
Istantanea delle prove inviate
- Inviato
- Voci del registro
- 1
- ID del caso
PD-20260104-BE1823- Titolo della pagina acquisita
- Suche - Sparkasse Bayreuth
- Artefatto PDF
- Prova in PDF
Base giuridica
Testo completo delle prove
This domain violates multiple sections of your Acceptable Use Policy (AUP) and Terms of Service (TOS):
🔴 AUP VIOLATIONS:
Illegal Activities: Active phishing operation targeting victims
Fraud & Deception: Impersonation of legitimate services
Identity Theft: Collection of credentials under false pretenses
Malicious Use: Abuse of your infrastructure for criminal purposes
⚖ APPLICABLE LAWS (Unknown):
• International Anti-Cybercrime Regulations
• Budapest Convention on Cybercrime
• Universal Fraud Prevention Laws
Phishing activities violate international cybercrime conventions and Unknown's domestic fraud laws.
📋 REGULATORY CONTEXT (Unknown):
International cybercrime frameworks require documented abuse response. Systematic inaction may affect business relationships with payment processors and security vendors.
IMMEDIATE ACTION REQUIRED: This evidence-backed report demonstrates clear violations requiring suspension per your own policies.
Continued hosting exposes your organization to regulatory scrutiny, reputational damage, and potential legal liability.
Note: This domain has been publicly documented in threat intelligence feeds.
Your response (or lack thereof) is being monitored by security researchers and may affect trust scores used by
payment processors, CDN providers, and enterprise security vendors.
Data Coverage
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenPhish | www.sparkasse-bayreuth.de |
phishing | Phishing - Sparkasse Bank |
| OpenPhish | www.sparkasse-bayreuth.de/de/home.html |
phishing | Phishing - Sparkasse Bank |
| Cloudflare DNS | sparkassebayreuth.com |
malicious | Sinkholed |
| OpenDNS | sparkassebayreuth.com |
phishing | Phishing Block |
| DigiCert UltraDNS | sparkassebayreuth.com |
malicious | Sinkholed |
| Hagezi Threat Feed | sparkassebayreuth.com |
malicious | Sinkholed |
| DNS4EU | sparkassebayreuth.com |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 13/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of sparkassebayreuth.com · checked Mar 1, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo