data[.]sitestoragesharing[.]nl

The domain data.sitestoragesharing.nl is currently active and classified as a high‑risk generic phishing site targeting banking credentials. The domain was registered on 14 February 2020 via Key‑Systems GmbH and resolves to the IPv4 address 45.154.232.28, which is assigned to AS44381 (ITsjefen AS) located in Norway. Authoritative nameservers ns01.proisp.no and ns02.proisp.no resolve the domain, and the web server presents an Nginx service with HTTP 200 responses and HSTS enforcement. The site uses a Let’s Encrypt R12 certificate, indicating HTTPS is enabled. VirusTotal analysis shows 14 of 95 security engines flag the host, and it appears on blocklists maintained by PhishDestroy and PhishingDB. The page title returned is “Simulated phishing – README”, confirming the presence of a phishing‑related page, though the full page content has not been publicly disclosed. Defenders should block the domain at perimeter and DNS layers, monitor outbound traffic for connections to 45.154.232.28, and add the host to internal threat intelligence feeds. Ongoing observation is advised to detect any changes in content or additional infrastructure components.