contrabismark[.]it[.]com

On 25 July 2026, the domain contrabismark.it.com was observed as an offline generic phishing indicator. The domain was registered on 21 February 2026 and resolves to the IPv4 address 213.209.129.79, which is announced by AS208185 Net Gate Telecom S.R.L. and geolocated to Romania. The site’s SSL certificate is identified as “R11”, but no further certificate details are provided. VirusTotal scans returned detections from 2 of 93 security vendors, indicating that at least two AV engines flagged the host as malicious.

The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy mitigation service. The page title returned by HTTP queries is the literal string “contrabismark.it.com”, offering no additional context about the intended victim brand or lure. No public Safe Browsing, Open Threat Exchange, or additional blocklist entries were reported. The registrar responsible for the registration is not disclosed in the available intelligence.

Because the site is currently offline, live content cannot be examined, and the exact phishing campaign tactics remain unknown. Defenders should continue to monitor the IP address 213.209.129.79 for any reactivation, enforce outbound traffic filtering to block connections to this host, and ensure that any email or web gateway solutions incorporate the observed blocklist entry and the two VirusTotal detections. Additional investigation of the SSL certificate “R11” may reveal reuse across other malicious infrastructure. Organizations are advised to update threat‑intelligence feeds with this indicator and to treat any future resolution of contrabismark.it.com as a potential phishing attempt until further analysis clarifies the campaign scope.