brand-x[.]nl

PhishDestroy first observed brand-x.nl on Sep 6, 2026. Stored content metadata identifies Strato as the apparent target. The captured page title is “STRATO - Domain reserved”. Stored page analysis classifies the content as impersonation. Current evidence score: 86/100 (critical).

Positive findings are stored from 4 sources: VirusTotal, MetaMask, SEAL, and URLScan. VirusTotal recorded 5 detections among 89 engines: CRDF, Forcepoint ThreatSeeker, Gridinsoft, Kaspersky, SOCRadar on Sep 7, 2026 at 14:15 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Sep 7, 2026 at 14:20 UTC. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Strato and assigned phishing as its category on Sep 6, 2026 at 23:08 UTC. Non-positive and contextual checks: AlienVault OTX listed 4 community pulse references (not vendor detections) on Sep 7, 2026 at 14:16 UTC. URLQuery recorded no positive detection; no observation timestamp was retained. Google Safe Browsing returned no flag on Sep 7, 2026 at 14:15 UTC.

HTTP 200 was recorded on Sep 6, 2026 at 22:13 UTC. Registration records for the domain list Domain Robot as the registrar and Aug 23, 2026 as the creation date. Registration preceded first observation by 13 days. At collection time, the hostname resolved to 217.160.0.173 on AS8560 (IONOS SE). The recorded endpoint location is Karlsruhe, DE. The stored server header is Apache. DOM analysis on Sep 6, 2026 at 22:22 UTC returned 86/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan.

The content indicators and 4 positive source findings support the current Strato-themed impersonation classification.