trczcr[.]ing

On July 25, 2026, the domain trczcr.ing was identified as a high-risk banking phishing domain. The domain was registered through Hosting Concepts B.V. d/b/a Registrar.eu on February 21, 2026. Infrastructure analysis reveals that the domain resolves to the IP address 77.239.105.35, which is located in Germany and is part of the AS213877 network operated by U1 DIGITAL SERVICES LTD. The domain is currently active and has an HTTP status of 200, indicating that it is reachable and operational.

The SSL certificate for the domain is identified as R10, which may be a self-signed or untrusted certificate, adding to the overall risk level. The page title of the domain is 'Redirecting...', suggesting that the domain may be used to redirect visitors to another malicious site. Analysis indicates that the domain appears on one security blocklist, specifically PhishDestroy, which is a known security service that flags and blocks malicious domains. While the domain has been flagged by PhishDestroy, it is important to note that only 4 out of 93 security vendors on VirusTotal have marked this domain as suspicious.

This discrepancy in detection rates suggests that the domain may still be under investigation by security researchers and has not yet been widely recognized as malicious. Defenders and security teams should exercise caution and implement additional monitoring and protective measures, such as DNS blacklisting and user education, to prevent potential phishing attacks. Further analysis of the exact content and targets of the phishing campaign is recommended to provide more comprehensive protection.