dynamic-panda-bb5b17[.]netlify[.]app

dynamic-panda-bb5b17.netlify.app is currently classified as a high‑risk generic phishing infrastructure. The domain was registered on May 08 2018 through the Netlify hosting platform and resolves to the IPv4 address 35.157.26.135, which is associated with Netlify’s cloud service. Independent analysis by PhishDestroy has placed the domain on its blocklist, and it also appears on one additional security blocklist. Google Safe Browsing has flagged the URL for social engineering, confirming its use in credential‑harvesting or deceptive campaigns.

VirusTotal reports that 18 of 91 scanned security vendors flag the domain as malicious, indicating a notable but not universal consensus among scanners. The available intelligence does not include a page title, SSL certificate details, HTTP response codes, or any observed payload. Consequently, the precise content hosted at the domain remains unverified, and the exact phishing lure or targeted brand cannot be confirmed from the current data set. However, the combination of blocklist inclusion, Safe Browsing alerts, and multiple vendor detections provides sufficient confidence to treat the domain as actively malicious.

Defenders should enforce network‑level blocking of the domain and the associated IP 35.157.26.135. Endpoint protection solutions that integrate blocklist feeds, including PhishDestroy and Google Safe Browsing, should be updated to reflect this indicator. Continuous monitoring of Netlify‑hosted assets and periodic re‑scanning on VirusTotal are recommended to capture any changes in the domain’s status. Given the high risk rating, organizations handling sensitive credentials should assume compromise attempts originating from this domain and apply appropriate user education and detection controls.