mail[.]frstore[.]rumahsakit[.]de

The domain mail.frstore.rumahsakit.de is currently active and flagged as a high-risk phishing threat. It resolves to the IP address 103.52.114.215 and is associated with the nameservers aldo.ns.cloudflare.com and pat.ns.cloudflare.com. The domain is actively blocked by PhishDestroy and appears on one security blocklist, indicating it has been recognized as a threat by security measures in place.

Analysis of the domain through VirusTotal reveals that 16 out of 95 security vendors have flagged this domain, which raises concerns regarding its legitimacy. Given these indicators, defenders should prioritize monitoring for any interactions with this domain within their networks. It is recommended to implement proactive measures such as blocking the IP address and the domain itself across all organizational endpoints to mitigate any potential threats.

Additionally, conducting further investigations into the IP address and associated infrastructure may provide additional insights into the campaign's origin and intent. No specific page title or content details are available for this domain, suggesting that further analysis may be required to fully understand the phishing tactics employed. Overall, this domain represents a significant risk and warrants immediate attention from cybersecurity teams.