roverapp[.]link

Analysis of roverapp.link indicates an active phishing infrastructure with high-risk characteristics as of July 22, 2026. The domain was registered on March 6, 2026, through Tucows Domains Inc. and remains operational. It resolves to IP address 151.247.193.142, hosted under AS399486 (12651980 CANADA INC.) in France. The domain is currently listed on one security blocklist (PhishDestroy) and has been flagged by 5 of 94 security vendors on VirusTotal, suggesting detection by multiple threat intelligence sources.

Infrastructure review reveals the domain lacks an SSL certificate and returns an HTTP 301 redirect status, a common tactic to obscure final landing pages or evade automated crawlers. Nameservers are delegated to ns1.eggywall.cc and ns2.eggywall.cc, a pattern observed in other phishing campaigns leveraging shared or bulletproof DNS providers. The page title, 'roverapp.link,' provides no clear indication of a targeted brand or service, and no specific phishing kit or scam type has been identified in available data.

Defenders should prioritize blocking this domain at DNS and network levels, particularly given its presence on PhishDestroy and detection by multiple security vendors. The absence of SSL and use of a 301 redirect may indicate an attempt to avoid detection during initial triage. Further analysis of the redirect chain and final landing page is recommended to determine the exact phishing methodology or targeted brand, though no such details are currently available in the evidence.