stellar-sherbet-1b477b[.]netlify[.]app

The domain stellar-sherbet-1b477b.netlify.app is currently active and was provisioned through the Netlify hosting platform. DNS resolution points exclusively to the IPv4 address 63.176.8.218, which is the sole host associated with this domain in the available intelligence. Netlify’s default nameserver configuration is not disclosed; the known nameserver field returns NS_NOT_FOUND, indicating that conventional NS lookups did not return a custom set of authoritative servers. VirusTotal analysis shows that 11 of 91 security vendors have flagged the domain, reflecting a moderate level of detection across independent scanning engines.

Google Safe Browsing classifies the site as a social engineering threat, confirming that automated web‑risk services consider the URL to be malicious. The domain is listed on at least one external security blocklist and has been actively blocked by the PhishDestroy mitigation service, providing further evidence of its abusive purpose. No public information is available regarding SSL/TLS certificate details, HTTP response codes, page title, or any associated evidence links, leaving those aspects of the site’s surface unverified. The combination of Netlify hosting, a single IP endpoint, and multiple vendor detections suggests a deliberately deployed phishing infrastructure rather than an incidental compromise.

Defenders should prioritize blocking outbound connections to 63.176.8.218 at the network perimeter and add stellar-sherbet-1b477b.netlify.app to local and cloud‑based URL filtering rules. Continuous monitoring of Netlify‑hosted domains for similar detection patterns is advisable, as the provider’s shared infrastructure can be leveraged for rapid deployment of additional malicious sites. Organizations should also incorporate threat‑intel feeds that reference the 11 vendor detections and Google Safe Browsing flag into their security orchestration pipelines to ensure timely response to any future activity originating from this domain.