starbridgefoiafiles[.]com

The domain starbridgefoiafiles.com is currently active and classified as high‑risk credential phishing. The site returns an HTTP 301 redirect and resolves to 34.128.162.118, an address owned by Cloudflare (AS13335) located in the United States. Registration data show the domain was created on 15 September 2025 through Cloudflare, Inc., and its authoritative nameservers are anuj.ns.cloudflare.com and joyce.ns.cloudflare.com. The TLS certificate is issued by Google Trust Services under the WE1 label, indicating a valid HTTPS endpoint. VirusTotal scans have flagged the domain in 3 of 91 security vendor engines, and it appears on a single public blocklist. The page title “Starbridge | Win more public‑sector contracts” is the only content observed; no further page content has been analysed. MX records point to Google’s mail infrastructure (aspmx.l.google.com priority 1 and alt2.as… priority 5). Automated analysis identified the use of Salesforce, Google Cloud, HubSpot, Google Tag Manager, Google Cloud CDN, Cloudflare and HTTP/3, suggesting a typical cloud‑based hosting stack. Gridinsoft assigned a trust score of 0/100, and the domain is listed as blocked by PhishDestroy. The evidence confirms a credential‑phishing campaign targeting public‑sector contractors, but the exact phishing lure, victim list, and any associated command‑and‑control infrastructure remain unknown. Defenders should add starbridgefoiafiles.com to DNS and URL filtering policies, monitor for outbound connections to the resolved IP, and consider sink‑holing or sink‑routing any traffic destined for the domain. Continuous re‑scanning on VirusTotal and periodic review of blocklist status are recommended to capture any changes in detection coverage.