starshipgift[.]io

Analysis of the domain starshipgift.io shows that it was registered on 21 February 2026. The domain resolves to the IP address 104.21.48.1, which belongs to AS13335 operated by Cloudflare, Inc., located in the United States. The site currently returns an offline HTTP status, and its SSL certificate is identified as "WE1". The page title reported by crawlers is exactly "starshipgift.io".

Threat intelligence sources indicate that the domain appears on one security blocklist and has been flagged by PhishDestroy. VirusTotal scans show that 4 of 93 security vendors returned a positive detection for the domain, reinforcing the suspicion of malicious use. Reputation services provide low confidence scores: Scamadviser assigns a trust score of 40 out of 100, and Gridinsoft rates the domain at 0 out of 100. These metrics collectively point to a high likelihood that the domain is being used for generic phishing, although the precise target brand or lure has not been disclosed in the available evidence.

The lack of a publicly reachable website limits direct content analysis, and the offline status may be temporary or intentional to evade detection. Defenders should proactively block the domain and its associated IP address at perimeter defenses, update URL filtering and threat intelligence feeds to include the observed indicators, and monitor for any re‑activation or related domains hosted on the same Cloudflare network. Continuous re‑scanning of the domain on VirusTotal and other sandbox services is recommended to capture any future changes in behavior. Organizations should also consider reviewing outbound traffic for connections to 104.21.48.1 and applying stricter email filtering for messages that reference the "starshipgift.io" URL.