ebillrechnung[.]flazio[.]com

Analysis of ebillrechnung.flazio.com indicates an active high‑risk generic_phishing campaign. The domain was registered on June 03, 2026 through Tucows Domains Inc. and resolves to the Google Cloud IP address 35.190.27.135, hosted on a Let's Encrypt YR2 certificate. DNS resolution shows Cloudflare authoritative nameservers elliott.ns.cloudflare.com and irma.ns.cloudflare.com. HTTP requests return a 403 Forbidden status and the page title is reported as "403 Forbidden," suggesting the front‑end is currently inaccessible or deliberately restricted.

Threat intelligence flags the site as credential phishing; PhishDestroy has already added it to its blocklist. VirusTotal scans report 17 of 91 security vendors flagging the domain, and Gridinsoft assigns a trust score of 0/100, reinforcing a malicious classification. The domain appears on one additional security blocklist, and its infrastructure is located in the United States.

While the exact phishing payload or landing page content has not been captured, the combination of a recent registration date, low‑reputation SSL, Cloudflare hosting, and multiple vendor detections points to a deliberately abused infrastructure. Defenders should block outbound connections to 35.190.27.135, add ebillrechnung.flazio.com to URL filtering policies, and monitor for any related traffic. Continuous re‑scanning is advised to capture any changes in the site’s behavior, and threat‑intel feeds should be updated with this indicator to aid broader detection efforts.