stellabrutal[.]es

Analysis indicates that stellabrutal.es is currently active and has been classified as a generic phishing site. The domain was registered on March 07 2026 through the registrar Abuseradar and resolves to the IPv4 address 84.32.84.228, which belongs to AS47583 operated by Hostinger International Limited in Lithuania. The site appears on one security blocklist and has a Gridinsoft trust score of 0 / 100. VirusTotal reports three out of ninety‑five scanners flagging the domain, confirming a low but non‑zero detection rate. The web server presents a WordPress installation backed by MySQL and PHP, with client‑side libraries including jQuery and jQuery Migrate. Traffic is delivered through Hostinger’s CDN and supports HTTP/3. The TLS certificate is issued by Let’s Encrypt (R12) and the HTTP response code is 200, indicating normal page delivery. The page title “Restaurante – Stella Brutal” is displayed, suggesting the site is masquerading as a restaurant landing page to lure victims. Evidence about the phishing payload is limited to the observed title and the generic classification. No additional indicators such as malicious URLs, credential‑stealing forms, or downloader scripts have been disclosed. The modest number of VirusTotal detections and the presence of only a single blocklist entry leave uncertainty about the scale of the campaign and whether the site is part of a larger phishing infrastructure. Defenders should block both the domain name and the associated IP address at perimeter firewalls and DNS resolvers. Continuous monitoring of the domain’s nameservers (ns1.dns-parking.com, ns2.dns-parking.com) is advised to detect any rapid re‑registration or redirection. Intrusion detection signatures should be updated to flag HTTP requests containing the page title “Restaurante – Stella Brutal”. End‑user awareness training should emphasize verification of restaurant‑related communications, especially those requesting login credentials or payment information.