stable-signup[.]app

The domain stable-signup.app was observed to resolve to the IP address 188.114.96.3, which is advertised as part of AS13335 owned by Cloudflare, Inc., and geolocated to the United States. Registration details indicate the domain was provisioned through Cloudflare, Inc., using the authoritative nameservers kia.ns.cloudflare.com and trevor.ns.cloudflare.com. No TLS certificate was presented for the host, confirming the absence of HTTPS protection. The site’s HTML title returned "Stable | Rails for the Real World," but no further content analysis is available.

Reputation services have assigned a Gridinsoft trust score of 0 out of 100, reflecting a highly malicious rating. The domain appears on four independent security blocklists, specifically PhishDestroy, Polkadot, Enkrypt, and Codeesura, confirming cross‑vendor recognition of malicious intent. VirusTotal scans reported three detections out of ninety‑five participating scanners, reinforcing the phishing classification.

The service status is currently offline, suggesting the payload may have been removed or the infrastructure is being rotated. Defensive guidance includes adding the domain and its resolved IP address to blocklists, monitoring DNS queries for the associated Cloudflare nameservers, and ensuring that any inbound traffic to the IP is denied. Continuous re‑evaluation is advised, as the lack of SSL and the low trust score indicate a high likelihood of credential‑harvesting activity, and future re‑hosting could resume the threat.