digitalevidencebureau[.]com

This domain, digitalevidencebureau.com, was registered on February 26, 2026, through HOSTINGER operations, UAB, and is associated with generic phishing activity targeting what appears to be a recovery fund scheme under the name 'Albert Kagina.' The domain resolved to IP 88.223.85.17, hosted under AS47583 (Hostinger International Limited) in the US, and used nameservers ns1.dns-parking.com and ns2.dns-parking.com. No SSL certificate was detected. The page title, 'Albert Kagina - Recovery Fund Platform,' suggests an attempt to impersonate or reference a financial recovery or compensation program, though the exact nature of the scam remains unverified due to lack of additional content analysis.

Analysis indicates the domain was flagged by three security blocklists and blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal recorded a detection from one of 93 security vendors, which, while minimal, aligns with the broader pattern of phishing-related activity. The domain was taken offline by July 25, 2026, likely following detection and mitigation efforts.

Defenders should treat this domain as malicious, particularly in contexts involving financial recovery scams or impersonation of named individuals. Historical logs should be reviewed for connections to 88.223.85.17 or the listed nameservers, and any residual references to 'Albert Kagina' or 'Recovery Fund Platform' in network traffic or endpoint telemetry should be investigated. Given the domain's offline status, further compromise via this specific infrastructure is unlikely, but related campaigns may emerge using similar naming conventions or hosting providers.