platero[.]app

This domain, platero.app, is currently active and resolves to the IPv4 address 151.158.1.246, which is geolocated to Switzerland and associated with the EvoxtCH hosting infrastructure. The domain is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and uses Cloudflare DNS resolvers (celeste.ns.cloudflare.com, evan.ns.cloudflare.com). TLS termination is provided by a Let's Encrypt certificate issued to the domain (identifier YE2). An HTTP GET returns a 200 status and the page title is reported as “Platero”. Security telemetry shows that the site is listed on one public blocklist and has been blocked by the PhishDestroy service. VirusTotal scans have recorded four detections out of ninety‑one scanned vendors, indicating that multiple security engines consider the site malicious. The available evidence points to a generic phishing operation, but the specific content of the page has not been publicly analysed, leaving the exact victim‑targeting technique uncertain. Defenders should block the domain at network perimeter, add the IP address 151.158.1.246 to deny lists, and monitor for any outbound connections to the associated Cloudflare name servers. Continuous re‑scanning with VirusTotal and inclusion in internal phishing detection rules are recommended to mitigate potential credential‑stealing attempts.