52531972[.]swh[.]strato-hosting[.]eu

Analysis indicates that the domain 52531972.swh.strato-hosting.eu is actively serving a high-risk phishing operation. Registered on February 21, 2026, through InterNetX GmbH, the domain currently resolves to IP address 81.169.145.153. The page title 'STRATO - Domain not available' suggests an attempt to mimic legitimate STRATO hosting services, though the exact content and targeting remain unconfirmed due to lack of direct page analysis. Infrastructure evidence reveals the domain is flagged by 9 of 95 security vendors, with detections categorized under generic phishing. It appears on two security blocklists, including PhishDestroy and BLP-Malware, reinforcing its classification as malicious. The domain's trust score is 0/100, further supporting its high-risk status. No additional details about the phishing kit, brand impersonation beyond the page title, or specific victim targeting are currently available. Defenders should treat this domain as an active threat. Network-level blocking of 81.169.145.153 and the domain itself is recommended. Given the STRATO branding in the page title, organizations using STRATO services should monitor for credential harvesting attempts or unauthorized access linked to this infrastructure. The domain remains active as of July 12, 2026, with no indication of takedown or mitigation.