wrth[.]info

This domain, wrth.info, was registered on 24 March 2026 through IONOS SE and is currently active. DNS resolves to IP 217.160.0.155, located in Germany and served by an Apache HTTP Server presenting a Sectigo Limited DV certificate. The web application stacks WordPress, MySQL, PHP and Bootstrap, and returns HTTP 200 with the page title “is under construction”. The domain appears on one security blocklist and has been flagged by PhishDestroy. Threat intelligence sources list it in two AlienVault OTX pulses and 11 of 94 VirusTotal scanners have reported malicious activity. Gridinsoft assigns a trust score of 0 / 100, and the overall risk rating is high. While the exact phishing payload or credential‑harvesting page has not been observed, the combination of a newly created site, low trust score, detection by multiple vendors, and inclusion in blocklists indicates a strong likelihood of a generic phishing campaign. Defenders should block network traffic to 217.160.0.155, add wrth.info to URL filtering policies, monitor for related login attempts, and consider sink‑holing the domain to gather additional telemetry.