starfivebk[.]icu

The domain starfivebk.icu was registered on April 21, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently classified as a high‑risk generic phishing site. As of July 12, 2026 the site remains active and returns HTTP 403 responses, displaying the page title “Just a moment…”. The TLS certificate is issued by Let’s Encrypt (CN = E7), indicating a valid HTTPS endpoint. Network resolution shows starfivebk.icu pointing to the Cloudflare edge address 104.21.84.71, which is associated with Cloudflare, Inc. in Canada. The authoritative nameservers are mack.ns.cloudflare.com and teagan.ns.cloudflare.com, confirming the use of Cloudflare’s DNS service. Gridinsoft assigns a trust score of 0 out of 100, and the domain appears on a single security blocklist. Reputation checks reveal that 2 of 95 security vendors on VirusTotal have flagged the domain, and AlienVault OTX lists it in one threat‑intelligence pulse. PhishDestroy has also blocked the domain, reinforcing the phishing classification. No additional payload details or compromised credentials have been publicly disclosed, leaving the exact malicious content uncertain. Defenders should immediately block starfivebk.icu at the network perimeter and add it to URL filtering and DNS sinkhole lists. Continuous monitoring of the associated IP address and Cloudflare nameservers is advised, as the infrastructure could be repurposed for further phishing campaigns. Organizations using automated intelligence feeds should incorporate the observed indicators—domain name, IP, nameservers, and TLS certificate—into their detection rules.