5862873[.]swh[.]strato-hosting[.]eu

The domain 5862873.swh.strato-hosting.eu was registered on February 21, 2026 and is presently listed as offline. Infrastructure analysis shows the hostname resolves to the IPv4 address 81.169.145.153, which is announced by AS6724 belonging to Strato GmbH in Germany. The HTTP response returned a 404 status code and the page title observed was "STRATO - Domain not available," indicating that no active payload is being served at the moment. No TLS certificate was presented, confirming the absence of HTTPS protection.

The site has been classified as a banking phishing campaign, and it is currently blocked by the PhishDestroy sinkhole. Examination of threat intelligence sources reveals that the domain appears on one security blocklist and that seven of ninety‑three VirusTotal scanners flagged the domain as malicious. These detections provide limited but concrete evidence of hostile intent.

Because the endpoint is offline, automated retrieval of the landing page content is not possible, leaving the exact phishing vector and any associated credential‑stealing forms unverified. Defenders should continue to monitor the IP address 81.169.145.153 for any re‑activation or related host activity, enforce outbound filtering for connections to this address, and ensure that any user‑agent or email filters reference the domain name and its known attributes. Adding the domain to internal blocklists and sharing the indicator with external threat‑sharing communities will help prevent future exploitation should the actor reactivate the infrastructure.