nierfeld[.]eu

Analysis of nierfeld.eu shows an active generic phishing operation targeting the consulting brand indicated by the page title “Nierfeld Startseite – Nierfeld Strategie & Management Consulting”. The domain is registered through InterNetX GmbH and resolves to 185.30.32.238, a server hosted by webgo GmbH in Germany. The site serves content over HTTPS using a Let's Encrypt certificate (YR1) and returns HTTP 200. Infrastructure fingerprints reveal a WordPress stack with MySQL, PHP, Nginx, Yoast SEO, Slider Revolution, OWL Carousel and jQuery. Four out of 91 VirusTotal scanners flagged the domain, and it is listed on a single security blocklist, including PhishDestroy. The risk rating is high and the trust score from Gridinsoft is 0/100. Evidence confirms brand‑impersonation behavior, but the exact malicious payload or credential‑harvesting mechanism has not been observed. Defenders should immediately block the domain and its IP at network borders, add the host to endpoint allow‑list exclusions, and continue monitoring for any related command‑and‑control traffic. Ongoing vigilance is advised to detect potential replicas that reuse the same hosting infrastructure or content management components.