pcatcrg[.]de

Analysis indicates that the domain pcatcrg.de was registered on 21 February 2026 through the registrar Horizoniq and uses the generic registrar‑provided nameservers dns1.registrar-servers.com and dns2.registrar-servers.com. DNS resolution points to the IPv4 address 108.178.2.234, which belongs to AS32475 (Internap Holding LLC) and is geolocated in the United States. No TLS certificate is presented, and an HTTP request receives no content because the site is currently taken offline. The page title observed during the brief capture was "Home | pcatcrg.de", but no further content analysis is available.

Threat intelligence shows that 15 of 93 security vendors on VirusTotal flagged the domain, and it appears on a single external blocklist. PhishDestroy has also listed the domain, and AlienVault OTX includes it in one pulse, confirming that the infrastructure has been associated with phishing activity. The limited number of detections suggests a relatively early stage of deployment or targeted blocklist exposure. Uncertainty remains regarding the specific phishing campaign, the credential‑collection mechanisms, and any payload delivered, as no page snapshot or credential‑harvest form has been captured.

Defenders should block the domain at DNS or proxy layers, monitor outbound connections to the associated IP address, and add the IP and nameserver records to reputation feeds. Continuous re‑scanning with multi‑vendor services is recommended to capture any new indicators, and any future HTTPS configuration should be inspected for certificate misuse. Organizations using web‑filtering solutions should ensure the domain is included in their blocklists to prevent end‑user exposure while the offline status is verified.