statusreview-x[.]com

Analysis of the domain statusreview-x.com indicates it is actively associated with phishing activity targeting users through a Plesk-themed interface. The domain is flagged on three security blocklists, including PhishDestroy, MetaMask, and SEAL, and appears in two AlienVault OTX threat intelligence pulses. Infrastructure details reveal the domain resolves to IP 91.192.10.212, hosted by ITP-Solutions GmbH & Co. KG in Germany, with Cloudflare nameservers (igor.ns.cloudflare.com and izabella.ns.cloudflare.com). The SSL certificate is issued by Let's Encrypt (YR2), a common choice for both legitimate and malicious sites. The page title, 'Plesk Obsidian 18.0.79,' suggests an attempt to mimic a Plesk control panel login or administrative interface, though the exact content and target of the phishing scheme remain unconfirmed. A VirusTotal scan detected the domain as malicious by 5 of 91 security vendors, reinforcing its classification as high-risk. The HTTP status code 303 indicates a redirect, which may be used to obscure the final destination or evade detection. Defenders should treat this domain as actively malicious, block it at the network level, and monitor for connections to the associated IP and nameservers. Further analysis of the redirect chain and payload is recommended to determine the full scope of the threat.