burger-kapital2[.]com

This domain burger-kapital2.com is assessed as a generic_phishing infrastructure operating under a brand impersonation scheme targeting a fictitious crypto trading platform "Bürger Kapital 2.0". The page presents itself as an AI-driven crypto trading environment, likely designed to harvest credentials and financial account access data.

Technical telemetry indicates a VirusTotal detection score of 4/95 security vendors flagging malicious behavior. The domain was registered through Registrar.eu (Hosting Concepts B.V.) and was created on May 29 2026, indicating a recently established infrastructure. It resolves to IP 104.21.47.192, hosted behind Cloudflare (AS13335, United States). SSL certificate is issued by Let's Encrypt (YE2). The domain is currently listed on 3 security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL intelligence feeds.

At the time of analysis, the domain remains active and continues to resolve without interruption, suggesting ongoing malicious campaign availability. The use of CDN masking and a newly registered domain profile reduces attribution clarity and increases risk persistence. The combination of brand impersonation, crypto-focused landing content, and credential harvesting indicators elevates the threat level. Security teams are advised to maintain blocking rules at DNS and proxy layers, monitor for related infrastructure reuse, and correlate traffic logs for attempts to access wallet-related services or login endpoints. End-user exposure risk remains high due to active dissemination and partial detection coverage across security vendors.