derschuetzenhof[.]de

Analysis of derschuetzenhof.de indicates a high-risk phishing threat still active as of July 22, 2026. This domain has been flagged on two security blocklists, specifically PhishDestroy and OpenPhish, suggesting it is being actively monitored for fraudulent activities. Infrastructure analysis reveals that it resolves to the IP address 217.160.0.58, which may be associated with other malicious activities.

The domain's nameservers are docks08.rzone.de and shades14.rzone.de, potentially indicating a shared hosting environment that could be used by multiple domains with similar malicious intents. Security checks from various vendors have identified this domain as concerning, with 7 out of 95 security vendors flagging it in their systems. Given this evidence, it is imperative for defenders to block access to this domain across their networks and to inform users to refrain from interacting with any communications claiming to originate from it.

Continuous monitoring for updates on this domain's status is essential, as its activity may evolve. Further investigation into the specific nature of the phishing attempts associated with this domain is recommended, as the exact contents and tactics employed by the threat actors are not yet fully analyzed.