rmtz[.]it

Analysis of rmtz.it, observed on July 24, 2026, classifies the domain as a confirmed phishing infrastructure. The domain was registered through Dynadot LLC on September 10, 2025 and is served by Cloudflare nameservers aria.ns.cloudflare.com and arturo.ns.cloudflare.com. DNS resolution points to IP address 217.154.177.94, which is assigned to AS8560 IONOS SE and geolocated to Spain. No SSL certificate is present on the host, indicating that the site operated without transport‑layer encryption. Threat intelligence from VirusTotal records that two of ninety‑five security vendors flagged the domain, reinforcing the malicious assessment.

Gridinsoft assigned a trust score of 0 out of 100, and the domain appears on a single security blocklist. Current operational status is offline, and the site has been blocked by the PhishDestroy mitigation service. The combination of a recently created domain, low‑trust score, vendor detections, and lack of HTTPS suggests a short‑lived phishing campaign rather than a legitimate service. Because the site is no longer reachable, detailed content analysis such as page title, brand targeting, or phishing kit identification cannot be confirmed at this time.

Defenders should continue to block the associated IP address and enforce DNS filtering for rmtz.it. Monitoring of Cloudflare name‑server queries may reveal related domains that reuse the same resolver set. Adding the domain to internal blocklists and updating external safe‑browsing feeds will reduce exposure. Continuous observation of VirusTotal and other reputation services is recommended to capture any re‑appearance or variant activity.