99nightintheforestx7[.]netlify[.]app

Analysis of 99nightintheforestx7.netlify.app, a domain created on May 08, 2018, indicates an elevated risk of phishing activity. The domain resolves to the IP address 35.157.26.135, which is hosted in Germany under ASN 16509 owned by Amazon.com, Inc. VirusTotal records show that 15 of 91 security vendors have flagged the domain, demonstrating a measurable level of detection across multiple scanning engines. The domain is listed on a single public blocklist and is actively blocked by the PhishDestroy service, reinforcing the suspicion of malicious use.

Registration was performed through Netlify, a platform commonly leveraged for legitimate static site hosting but also occasionally abused for malicious campaigns. No publicly available data on SSL certificate status, HTTP response codes, or page title has been disclosed, leaving those aspects of the site’s infrastructure unverified at this time.

Defenders should treat any traffic to or from this domain as hostile, enforce network-level blocking, and monitor for credential harvesting attempts that may leverage the domain’s infrastructure. Continuous re‑evaluation is advised, as additional intelligence such as content analysis or endpoint telemetry could further clarify the threat profile.