strategy-x2[.]net

This domain, strategy-x2.net, was created on 22 April 2025 and is currently flagged as part of a generic phishing campaign. The authoritative nameservers are jake.ns.cloudflare.com and maxine.ns.cloudflare.com, indicating that the domain is hosted behind Cloudflare’s network. DNS resolution points to 104.21.75.115, an address owned by AS13335 Cloudflare, Inc., located in the United States. The site employed Cloudflare’s HTTP/3 protocol and presented an SSL certificate issued by Google Trust Services under the WE1 intermediate, confirming that TLS termination is performed by Cloudflare.

The page title returned by the server is the bare domain name, “strategy-x2.net”, with no additional content disclosed. Threat intelligence shows that the domain appears on one security blocklist and is actively blocked by PhishDestroy. VirusTotal analysis returns nine positive detections out of ninety‑five scanners, reinforcing the suspicion of malicious intent. No further malware or payload details are available, and the content of the site has not been captured because the domain was taken offline at the time of this assessment.

Given the observed infrastructure – Cloudflare hosting, recent registration, and multiple vendor detections – defenders should continue to monitor the domain, enforce blocklist rules, and consider extending network‑level blocks for the associated IP address. Additional collection of the site’s content, if it resurfaces, would be required to confirm the phishing vector and to extract any credential‑harvesting URLs. Until such artefacts are obtained, the domain remains a high‑confidence phishing indicator.