peaackcockorg[.]netlify[.]app

peaackcockorg.netlify.app is currently listed as an offline generic phishing point of interest. The domain resolves to the Amazon‑owned address 98.84.224.111, which is owned by AS14618 (Amazon.com, Inc.) and is served through Netlify’s hosting platform. Netlify’s infrastructure reports HSTS enforcement and a DigiCert Global G2 TLS RSA SHA256 2020 CA1 certificate, indicating a valid TLS chain despite the site being unavailable. HTTP requests return a 404 “Site not found” response, and no nameserver information is disclosed.

The domain appears on two independent phishing blocklists, PhishDestroy and ScamSniffer, confirming that security‑focused feeds have already flagged it. VirusTotal analysis shows five of ninety‑five scanning engines flag the host, reinforcing the suspicion of malicious intent. The presence on multiple blocklists, the association with a cloud provider, and the TLS certificate suggest the operators leveraged a reputable hosting service to lend credibility to the site before taking it offline.

Defenders should add the domain and its resolved IP address to deny‑list rules, ensure that any outbound connections to 98.84.224.111 are monitored, and update web‑filtering policies to include the two blocklists that already reference the domain. Continuous re‑resolution checks are recommended because the domain could be reactivated on the same infrastructure. Threat‑intel consumers should treat the indicator as a high‑confidence phishing artifact and correlate it with any observed credential‑stealing traffic targeting similar URL patterns.