silkevoss[.]de

On 20 July 2026 the domain silkevoss.de was identified as an active generic phishing operation. DNS resolution points exclusively to the IPv4 address 83.133.245.165. The address currently appears on one security blocklist and the domain has been explicitly blocked by the PhishDestroy mitigation service, confirming that it is recognized as malicious by at least one dedicated anti‑phishing platform. VirusTotal records indicate that two out of ninety‑one scanning engines have raised detections for the domain, demonstrating that the threat is partially visible across the broader security community but that many scanners have not yet flagged it. Authority for the domain is provided by three nameservers—ns12.domainunion.net, ns13.domainunion.net and ns14.domainunion.net—showing reliance on the DomainUnion DNS infrastructure. No publicly available page title, SSL certificate fingerprint, HTTP status code, or Safe Browsing verdict has been disclosed, leaving the exact content and luring technique of the site unverified. The combination of active status, high‑risk rating, blocklist presence, and partial vendor detections supports a classification of confirmed phishing. Defensive recommendations include adding silkevoss.de to network deny lists, configuring intrusion detection signatures to alert on DNS queries for 83.133.245.165, and ensuring that email security gateways reference the PhishDestroy block. Continuous monitoring is advised, as additional scans may increase the detection count and reveal further technical indicators that can refine mitigation controls.