gardenpro[.]digital

On July 19, 2026 the domain gardenpro.digital was observed serving HTTP 200 responses with a page titled “інтернет магазин - Садовий шланг, що розтягується”. The site hosts a Let’s Encrypt certificate issued by YR1 and resolves to the IPv4 address 2.26.75.163, which geolocates to Germany (Great Flower). Registration records show the domain was created through NICENIC INTERNATIONAL GROUP CO., LIMITED and is served by the authoritative name servers ns3.my-ndns.com and ns4.my-ndns.com. Threat intelligence sources list the domain on one security blocklist and note that PhishDestroy has already blocked it. VirusTotal scans have flagged the domain in five out of ninety‑one antivirus engines, and AlienVault OTX contains two pulses referencing it. The aggregated evidence indicates an active high‑risk generic phishing operation. At present no additional technical artefacts such as malware payloads or credential‑stealing pages have been disclosed, so the exact phishing kit and targeted brand remain unknown. Defensive teams should immediately block gardenpro.digital and its resolving IP 2.26.75.163 at network perimeter, add the domain to URL filtering and email security deny lists, and monitor for any related DNS or HTTP activity. Continued observation of the associated nameservers and any new detections in threat feeds is recommended to capture potential expansion of the infrastructure.