stillerentveer[.]live

Analysis of stillerentveer.live shows a high‑risk generic phishing infrastructure that is currently active. The domain was registered on May 25, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The site presents a valid TLS certificate issued by Let’s Encrypt (E7) and serves HTTP status 200 over HTTP/3, indicating successful delivery of content. The page title, "Stille Rentveer | Official Platform for AI Assisted Trading," aligns with the reported scam type of brand impersonation, though the targeted brand is not explicitly identified in the available data. Front‑end libraries such as Unpkg, jsDelivr, jQuery, and IPinfo are detected, alongside Cloudflare Browser Insights, suggesting reliance on common CDN and analytics services. Reputation metrics are poor: Gridinsoft assigns a trust score of 0 / 100, the domain appears on one security blocklist, and PhishDestroy has already blocked it. VirusTotal reports a single detection out of 91 scanning engines, reinforcing the malicious classification. Nameservers april.ns.cloudflare.com and ishaan.ns.cloudflare.com confirm Cloudflare hosting. While the exact phishing lure (form layout, credential capture method) has not been observed, the combination of a brand‑impersonation title, low trust scores, and external blocklist listings provides sufficient evidence for defensive action. Security teams should add the domain and its associated IP to deny‑list rules, monitor DNS queries for the listed nameservers, and enforce URL filtering to prevent end‑user access. Continuous re‑evaluation is advised, as additional detection signals may emerge as the campaign evolves.