mgmarket5[.]at

Analysis of the domain mgmarket5.at, observed on July 24, 2026, indicates active generic phishing infrastructure. The domain resolves to the Cloudflare edge address 104.26.7.112, belonging to AS13335 Cloudflare, Inc. and located in the United States. DNS resolution is served by the Cloudflare nameservers sunny.ns.cloudflare.com and tim.ns.cloudflare.com, and the site enforces HTTP Strict Transport Security (HSTS). An HTTP request returns a 301 permanent redirect response, suggesting the host may forward traffic to another location.

The TLS certificate presented is issued by Google Trust Services under the WE1 intermediate, confirming the use of a valid public‑trusted chain. VirusTotal scans show that 2 of 95 security vendors have flagged the domain as malicious, and the domain appears on a single external blocklist. Additionally, the domain is listed as blocked by the PhishDestroy service.

No further intelligence such as page content, brand targeting, or additional malicious payloads is available at this time. Defenders should continue to block mgmarket5.at at DNS and proxy layers, monitor for any new indicator updates, and consider adding the IP 104.26.7.112 to network‑level deny lists, acknowledging that Cloudflare may host multiple unrelated tenants. Ongoing observation is recommended to detect any changes in redirect behavior or additional detection counts.