verifizierung[.]my-premium[.]cloud

The domain verifizierung.my-premium.cloud was registered on March 07, 2026 through NameCheap, Inc. and is currently flagged as an active generic phishing site. Its public page returns HTTP 200 and displays the title “Trufflepig Forensics 404”, a likely placeholder used to obscure the malicious intent. Infrastructure analysis shows the domain resolves to the IPv4 address 188.245.51.144, which belongs to the Hetzner Online GmbH network (AS24940) in Germany. The web server is identified as Nginx and the TLS certificate is issued by ZeroSSL ECC Domain Secure Site CA, indicating a free or low‑cost certificate commonly used by malicious operators. The domain appears on a single security blocklist (PhishDestroy) and has a Gridinsoft trust score of 0 out of 100. VirusTotal reports that 12 of 95 security vendors have marked the host as malicious, reinforcing the suspicion. The nameservers dns1.registrar-servers.com and dns2.registrar-servers.com are typical of the registrar’s default configuration. Content on the site has not been publicly disclosed beyond the generic title, so the specific brand or service being spoofed remains uncertain. Defenders should assume the site is being used to harvest credentials and block traffic to the domain at perimeter devices. Email gateways should add the domain to deny lists, and security teams should monitor for related subdomains or similar registration patterns. Given the low trust score, active blocklist status, and hosting on a reputable provider, the threat is likely operated by a low‑skill actor leveraging readily available tools. Continuous monitoring of the IP address and rapid removal from allow lists are recommended to mitigate exposure.