marina-tours[.]de

Analysis of marina-tours.de shows that the domain is currently active and has been listed on at least one security blocklist. The domain resolves to the IPv4 address 81.169.145.83 and is served by the authoritative name servers docks16.rzone.de and shades09.rzone.de. PhishDestroy has already blocked the host, indicating that it is recognized by at least one anti‑phishing service. VirusTotal reports that the domain was scanned by 91 antivirus and URL‑reputation engines; none of the engines flagged the domain as malicious at the time of scanning, but the absence of detections does not constitute a safety assurance.

No public information is available regarding the site’s SSL certificate, HTTP response codes, Safe Browsing status, OTX mentions, registrar details, or page title, and the content of the site has not been publicly analysed. Consequently, the precise phishing payload, targeted brand, or credential‑harvesting technique remains unknown. Defenders should treat marina-tours.de as a confirmed phishing infrastructure and add the domain to internal blocklists and DNS filtering policies.

Continuous monitoring of the associated IP address and name servers is advised, as changes to the hosting environment could indicate a shift in activity. Where possible, sinkholing or redirecting traffic to a controlled response page can aid in gathering additional forensic data. Given the active status and blocklist presence, the domain should be considered a high‑priority indicator for threat‑intel feeds and endpoint protection updates until further investigation clarifies its operational details.