register-strata[.]money

register-strata.money is flagged as a generic phishing domain and has been taken offline as of the report date, July 24, 2026. The site resolved to 172.67.161.24, an address announced by AS13335, which is owned by Cloudflare, Inc. The domain’s authoritative nameservers are kianchau.ns.cloudflare.com and meilani.ns.cloudflare.com, both hosted on Cloudflare’s network, confirming the registration path through Cloudflare, Inc. The TLS certificate presented was issued by Google Trust Services under the WE1 authority, indicating a valid HTTPS endpoint, but the HTTP response returned a 403 status code, suggesting the server is actively denying access to the requested resource. The only visible page title is the German phrase “Nur einen Moment…”, which provides no further context about the payload or targeted brand.

Security telemetry shows the domain appears on a single blocklist and was blocked by PhishDestroy, while VirusTotal recorded five detections out of ninety‑five scanners, confirming that multiple security vendors observed malicious characteristics. Detected technologies include Cloudflare Browser Insights, Cloudflare’s reverse‑proxy service, and HTTP/3 support, which are typical of Cloudflare‑hosted sites and do not add substantive risk insight beyond infrastructure attribution. Because the site is currently offline, immediate threat execution appears halted, yet the infrastructure—public‑suffix domain, Cloudflare‑protected hosting, and a valid SSL certificate—remains reusable for future phishing campaigns.

Defenders should ensure that their web filtering solutions block register-strata.money at the DNS and URL layers, add the domain to internal blocklists, and monitor Cloudflare‑associated IP ranges for any re‑activation.