soneium[.]nl

The domain soneium.nl was registered on May 25, 2025 via team.blue nl B.V. and remains active as of the 12 July 2026 assessment. The site returns an HTTP 301 redirect and the page title resolves to “TransIP - Reserved domain”, indicating that the domain is currently parked on the TransIP infrastructure. The classification assigned by the source is generic phishing with a high risk rating. Infrastructure analysis shows that the domain resolves to the IPv4 address 37.97.254.27, which belongs to AS20857 (Signet B.V.) and is geolocated in the Netherlands. The authoritative name servers are ns0.transip.net, ns1.transip.nl, and ns2.transip.eu, all consistent with the TransIP hosting platform. TLS is provided by a Sectigo Limited certificate issued under the Sectigo Public Server Authentication CA DV R36, confirming a valid SSL chain. An MX record is present with priority 10 pointing to soneium.nl, suggesting that the domain is capable of receiving email. Reputation data indicates that the domain appears on a single security blocklist and has been flagged by PhishDestroy. VirusTotal analysis recorded four positive detections out of ninety‑five scanned vendors, reinforcing the suspicion of malicious use. The Gridinsoft trust score of 0 out of 100 further reflects a poor reputation. These signals, combined with the generic phishing designation, support the high risk rating. Defenders should add soneium.nl to deny‑list rules at both DNS and proxy layers, and block outbound traffic to its resolved IP address 37.97.254.27. Continuous monitoring of the domain’s DNS records is advised, as changes to name servers or MX entries could signal a shift in operational use. Email security gateways should treat any messages originating from or directed to soneium.nl as suspicious, applying quarantine or additional verification steps.