9starline[.]com

9starline.com was registered on 21 February 2026 through Key-Systems GmbH and is currently resolved to the IPv4 address 212.11.64.170, which is advertised as belonging to AS42624 Global-Data System IT Corporation in Switzerland. The domain resolves without TLS; no SSL certificate is presented and the HTTP response returns status code 200 with the page title identical to the domain name. Nameserver resolution points to ns1.emailverification.info and ns2.emailverification.info, both of which are commonly observed in malicious hosting setups.

Reputation services rate the domain poorly. Gridinsoft assigns a trust score of 0 out of 100, and the site is listed on the PhishDestroy blocklist as well as a single additional security blocklist. VirusTotal scans have triggered detections from 11 of 95 scanned security vendors, indicating that multiple engines recognize malicious patterns associated with the site.

Publicly available content on the site is limited to a generic title and does not disclose the targeted brand or the specific phishing lure employed, leaving the exact credential‑stealing methodology uncertain. The lack of a valid TLS certificate and the use of email‑verification related nameservers suggest an attempt to mimic legitimate email services, but the precise victim profile cannot be confirmed without deeper payload analysis.

Defenders should add 212.11.64.170 and the domain 9starline.com to network deny lists and email filtering rules. Continuous monitoring of DNS queries for the associated nameservers is advised to detect any future pivot to additional malicious hosts. Where possible, sinkholing the IP address can disrupt traffic, and incident response teams should treat any credential submissions to the domain as compromised and enforce password resets.