roterdstrasse[.]at

Analysis of the domain roterdstrasse.at shows that it remains active as of the report date, July 20, 2026. The domain is listed on one security blocklist and is actively blocked by PhishDestroy, indicating that at least one defensive feed has flagged the infrastructure. VirusTotal records show that two out of ninety‑five scanners have identified the domain as malicious, providing limited but corroborating detection evidence. The authoritative name servers ns1.zwogi1.com and ns2.zwogi1.com resolve the domain to the IPv4 address 142.132.135.144, which is the sole hosting endpoint observed for this campaign. Registration details reveal that the domain was created through the registrar Tirolspace Hosting Network (registrar ID 383) and lists Fa. Zingerle Markus as the registrant, suggesting a potentially disposable or compromised registration profile. No additional intelligence such as SSL certificate details, HTTP response codes, or page titles is currently available, leaving the exact content and target of the phishing lure unknown. Defenders should add the domain to local blocklists, monitor traffic to the associated IP address, and consider harvesting any future DNS changes from the zwogi1.com name servers. Continuous observation of VirusTotal and other sandbox feeds is recommended to capture any escalation in detection counts, and any inbound connections to 142.132.135.144 should be logged and investigated for credential harvesting or other malicious activity.