dev[.]meijerenblessing[.]nl

The domain dev.meijerenblessing.nl was observed hosting a page titled "Plesk Obsidian 18.0.73" and is currently listed as offline. Technical traces show the domain resolves to IP address 92.205.21.21, which belongs to AS21499 Host Europe GmbH located in France. The domain is delegated to four nameservers (ns1.sectigoweb.com, ns2.sectigoweb.com, ns3.sectigoweb.com, ns4.sectigoweb), and the registration record indicates it was created on March 08, 2001 through Hosting Concepts B.V. d/b/a Registrar.eu. No SSL certificate was detected for the site, implying that any historic traffic would have been delivered over plain HTTP.

Trust metrics are extremely low: Gridinsoft assigns a score of 0/100 and Scamadviser a score of 1/100, reinforcing the malicious assessment. VirusTotal scans report that four of ninety‑five security vendors flagged the domain, and the domain is blocked by PhishDestroy and appears on one additional security blocklist. The intelligence categorises the activity as banking phishing, consistent with the generic phishing threat type and the elevated risk level assigned.

While the current offline status limits direct observation of the payload, the combination of a default Plesk control‑panel title, lack of encryption, low trust scores, vendor detections, and blocklist listings provides strong evidence of abuse. Defenders should continue to block the domain and its associated IP, monitor for any re‑registration or resurrection of the host, and consider adding the domain to internal URL filtering and threat‑intel feeds. Additional analysis would be required to capture the exact phishing content if the site becomes active again.