stoser[.]simpress[.]net

stoser.simpress.net is a subdomain of simpress.net. PhishDestroy first observed the hostname on Mar 10, 2026. Stored content metadata identifies Google as the apparent target. The captured page title is “403 Forbidden”. Stored page analysis classifies the content as brand impersonation. Current evidence score: 86/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, Google Safe Browsing, DNS security resolvers, and Cloudflare Radar. VirusTotal recorded 12 detections among 91 engines: ADMINUSLabs, BitDefender, CyRadar, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Seclookup, SOCRadar, Sophos on Jul 27, 2026 at 03:36 UTC. Google Safe Browsing flagged the domain: Social Engineering on Mar 10, 2026 at 13:59 UTC. DNS security checks returned 7 blocking results across 14 tested policies: Adguard Default, Adguard Family, Cloudflare Family, Cloudflare Security, Control D Adblock, Control D Family, Control D Malware; no observation timestamp was retained. Cloudflare Radar classified the hostname as malicious and assigned the categories phishing and security threats; its verdict timestamp was not retained. Non-positive and contextual checks: The external blocklist snapshot contained no matches on Aug 7, 2026 at 22:20 UTC. URLScan completed without a malicious verdict (score 0) on Jul 29, 2026 at 02:49 UTC. PhishStats returned no feed match on Mar 10, 2026 at 13:59 UTC.

An access-restricted HTTP 403 response was recorded on Aug 7, 2026 at 22:25 UTC. Registration records for the registrable domain simpress.net list InterNetX GmbH as the registrar and Mar 10, 2026 as the creation date. Registration and first observation occurred on the same UTC date. At collection time, the hostname resolved to 176.126.201.242 on AS44043 (Cyber_Folks SRL). The recorded endpoint location is Giurgiu, RO. The stored server header is LiteSpeed. DOM analysis on Apr 23, 2026 at 03:20 UTC returned 83/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through May 25, 2026; checked Mar 15, 2026 at 05:41 UTC.

The content indicators and 4 positive source findings support the current Google-themed brand impersonation classification.