rover-net[.]cc

This domain, rover-net.cc, is flagged as an active social engineering phishing threat as of July 21, 2026. Registered on July 18, 2026, through Hosting Concepts B.V. d/b/a Registrar.eu, it resolves to the IP address 91.240.20.15 and remains operational. Google Safe Browsing explicitly classifies the domain under 'social engineering,' a designation consistent with its presence on one security blocklist and its detection by PhishDestroy. VirusTotal reports that 6 out of 95 security vendors have flagged the domain, indicating a moderate but notable level of consensus among detection engines. The domain's nameservers, ns1.eggywall.org and ns2.eggywall.org, may warrant further scrutiny, as they could be part of a broader malicious infrastructure. No specific brand impersonation or phishing kit details are currently available in the intelligence data, leaving the exact nature of the phishing content uncertain. Defenders should treat this domain as high-risk and prioritize blocking both the domain and its associated IP address at the network perimeter. Additional monitoring of the nameservers and registrar activity may reveal related malicious domains. Given the domain's recent registration and active status, continued vigilance is advised, particularly for signs of credential harvesting or other social engineering tactics targeting end users.