sprightly-longma-4a5bc1[.]netlify[.]app

PhishDestroy identifies a high-risk credential-harvesting phishing domain hosted on sprightly-longma-4a5bc1.netlify.app, a Netlify-registered landing page designed to trick victims into submitting sensitive login information. This malicious site operates as a spoofed login interface for legitimate services, often distributed via deceptive emails, social media links, or malvertising. Once accessed, users are immediately prompted for credentials, which are exfiltrated to attacker-controlled servers under the control of a phishing operation likely operating out of a bulletproof hosting infrastructure. This domain was flagged by 18 out of 95 VirusTotal security vendors and is actively blocked by Google Safe Browsing as a confirmed phishing resource. It resolves to IP address 63.176.8.218 via Netlify, a platform known to host both legitimate and malicious content due to its ease of deployment. The domain’s recent registration and immediate malicious deployment indicate an opportunistic campaign likely targeting unsuspecting users with urgent fake alerts or fake software update prompts. If you visited sprightly-longma-4a5bc1.netlify.app, assume your credentials or personal data may have been compromised, even if you did not enter any information. Immediately change passwords for any accounts entered on the site, enable multi-factor authentication on those accounts, and scan your device with updated antivirus software. Report the domain to your email provider or browser if you received it via email or messaging. Avoid re-entering any sensitive data on this domain, and warn others who may have been targeted by this campaign. Monitor financial accounts and enable credit monitoring if you entered payment details. This site is confirmed malicious and should not be trusted under any circumstances.