Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@adacor.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
volksbank-koeln-bonn[.]kontoeroeffnung-fk[.]de
“Kontoeröffnung Firmenkunde der Volksbank Köln Bonn eG”
volksbank-koeln-bonn.kontoeroeffnung-fk.de — Non verificato. Tipo di truffa: Generic Phishing. Riepilogo delle prove: VirusTotal 16/91 (BitDefender, Chong Lua Dao, CRDF, CyRadar, ESET); URLQuery 3 alerts; PhishDestroy score 95/100.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
This domain hosts a page titled Kontoeröffnung Firmenkunde der Volksbank Köln Bonn eG and returns an HTTP 200 status while remaining active. It resolves to IP address 46.167.168.30 located in Germany under AS42442 Adacor Hosting GmbH and uses the nameservers ns1.hosting.de, ns2.hosting.de and ns3.hosting.de. The certificate was issued by Let's Encrypt under the YR1 profile. The page content mimics corporate account opening procedures associated with Volksbank Köln Bonn eG.
Detection data shows 14 out of 95 vendors marking the domain on one scanning platform along with a trust score of 0 out of 100 from a separate source. The domain appears on one security blocklist and has been recorded by PhishDestroy. Infrastructure analysis reveals standard hosting resources that do not match known legitimate domains operated by the referenced financial institution.
Current status indicates the site continues to serve content without interruption as of July 12 2026. The scam classification listed is generic phishing with no additional registration or creation dates available for further timeline reconstruction. No evidence confirms ownership by the bank whose branding appears on the page.
Defenders should block the domain and its resolving IP at network perimeters and email gateways. Organizations are advised to compare the domain against official bank domains through direct verification channels and to log any user attempts to access the resource for incident correlation. Continuous monitoring of similar subdomain patterns is recommended given the active status.
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | volksbank-koeln-bonn.kontoeroeffnung-fk.de |
malicious | Sinkholed |
| Hagezi Threat Feed | volksbank-koeln-bonn.kontoeroeffnung-fk.de |
malicious | Sinkholed |
| DNS4EU | volksbank-koeln-bonn.kontoeroeffnung-fk.de |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Analisi di VirusTotal
Dati e relazioni esterne
PD-20260624-624BEA Recipient: abuse@adacor.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo