bellonapoli[.]hostel[.]town

bellonapoli.hostel.town is currently active and classified as a credential phishing site targeting users of the Ostello Bello Napoli hospitality service, as indicated by the page title “Ostello Bello Napoli - Naples, Italy”. DNS resolution points to the IPv4 address 172.86.104.14, which is hosted in the United States under AS14956 operated by RouterHosting LLC. The domain was registered through Spaceship, Inc., and the authoritative nameservers are launch1.spaceship.net and launch2.spaceship.net. TLS is provided by a ZeroSSL ECC DV SSL certificate issued by ZeroSSL GmbH, confirming the use of a free SSL provider. Reputation data show a Gridinsoft trust score of 0 out of 100 and the domain appears on a single security blocklist. It has been blocked by the PhishDestroy service and is listed on VirusTotal with ten of ninety‑one scanners flagging it as malicious. HTTP requests return a 200 status code, indicating the site is serving content. The high risk rating aligns with the credential‑phishing designation. While the site content has not been examined directly, the observed infrastructure and detection metrics suggest a purposeful malicious operation. Defenders should block the domain at network perimeters, add the associated IP address to deny lists, monitor DNS queries for the listed nameservers, and continue to track any changes in detection counts or blocklist status.