fensterservice-berlin[.]com

PhishDestroy identifies fensterservice-berlin.com as an active credential theft domain currently under investigation for phishing activity. This rogue site masquerades as a legitimate window repair service in Berlin to harvest user login credentials, posing a direct risk to individuals submitting personal or financial information through fake contact forms or spoofed login portals. Technical analysis shows the domain resolves to IP 188.114.96.3 and is registered through Fewmoretaps OU d/b/a Trustname.com, with a domain creation date of March 29, 2026. At present, VirusTotal reports 0 detections out of 95 scanners, indicating this threat is not yet widely recognized by security tools.

This domain leverages a Let’s Encrypt SSL certificate to appear trustworthy, undermining browser warnings and increasing the likelihood of user deception. The lack of current detection highlights the importance of proactive monitoring and user vigilance. Given the low-profile registration (via a privacy-focused registrar) and recent creation, this site may be part of a broader campaign targeting German-speaking users seeking home repair services. The absence of blocklist entries suggests this domain is still in early deployment, making it a high-risk, rapidly evolving threat.

If you have visited fensterservice-berlin.com or entered any credentials on the site, immediately change passwords and enable multi-factor authentication on all related accounts. Report the domain to your security team or local cybercrime unit. Avoid re-engaging with this site and consider blocking it via firewall or DNS filtering. Stay vigilant for similar domains mimicking local service providers—always verify legitimate websites through official channels before submitting sensitive data.