kontakt[.]de-digittal[.]me

This domain, kontakt.de-digittal.me, is flagged as a credential phishing site designed to harvest user login credentials through fraudulent web forms. Analysis indicates no direct association with a specific brand or known phishing kit, though the domain name mimics legitimate German contact portals to deceive users. The infrastructure appears generic, lacking distinctive branding but employing social engineering tactics to trick victims into submitting sensitive information. Infrastructure analysis reveals the following technical indicators: the domain was registered on May 20, 2026, an unusually future date suggesting potential typosquatting or domain spoofing. It resolves to the IP address 104.194.156.40, hosted by a provider in Germany (FranTech Solutions). At the time of detection, 16 out of 95 security vendors on VirusTotal flagged the domain as malicious. The domain appears on a single security blocklist and was actively blocked by endpoint protection systems. No SSL certificate is present, increasing the likelihood of interception or detection by modern browsers. The domain is currently offline, reducing immediate risk to end users. However, residual threats remain, particularly for systems that may have cached DNS entries or users who visited the site prior to takedown. Response actions should include monitoring for related domains using the same IP or registrar, as well as alerting users who may have interacted with the site. Despite its offline status, the domain’s creation date and hosting provider suggest potential for re-emergence under a similar scheme. Organizations are advised to block the domain and IP at the perimeter and conduct retrospective log analysis to identify any prior access attempts.