koniglichvertrauen[.]com

Analysis of koniglichvertrauen.com shows it is an active generic phishing infrastructure targeting users of a financial institution suggested by the page title “Home - Koniglich Vertrauen Bank”. The domain was registered on 21 Feb 2026 through Hosting Concepts B.V. d/b/a Registrar.eu and resolves to IP 198.12.80.250, which is hosted in the United States under ASN 36352 (HostPapa). The authoritative name servers are ina1.registrar.eu, ina2.registrar.eu and ina3.registrar.eu. HTTP requests return a 200 response, and the site operates without TLS, exposing all traffic in clear text. The domain is listed on one public blocklist and is actively blocked by PhishDestroy. VirusTotal scans flagged the domain in 12 of 93 security engines, reinforcing the malicious assessment. The limited public data does not reveal the exact phishing page layout, credential‑capture mechanisms, or any associated command‑and‑control endpoints, leaving those vectors uncertain. Defenders should block DNS resolution to 198.12.80.250, enforce HTTPS‑only policies for the domain, and monitor outbound connections for attempts to contact the host. Email gateways should quarantine messages referencing “Koniglich Vertrauen Bank” URLs, and incident response teams should treat any credential submissions to this site as compromised.