aundrebank[.]netlify[.]app

The domain aundrebank.netlify.app is currently active and has been classified as a high‑risk banking phishing site. Infrastructure analysis shows the hostname resolves to the IPv4 address 35.157.26.135, which is part of Netlify’s shared hosting platform. Registration metadata indicates the site was created using Netlify’s free‑site service, and the authoritative name server lookup returned NS_NOT_FOUND, suggesting the domain relies on Netlify’s default DNS configuration rather than a custom registrar‑owned nameserver set. Threat intelligence sources list the domain on one public blocklist, and PhishDestroy explicitly blocks it.

VirusTotal reports that six out of ninety‑one scanned scanners flagged the domain as malicious, confirming that multiple independent engines observe suspicious behavior. No additional public reputation services, Safe Browsing status, or SSL certificate details are available in the current feed. The limited data set leaves open questions about the exact phishing vector, credential‑stealing pages, and any payload delivery mechanisms.

Analysts should treat the domain as malicious until further evidence is obtained. Recommended mitigations include adding the hostname and its resolved IP address to network‑level deny lists, updating web‑proxy and DNS filtering policies, and monitoring Netlify’s IP space for related activity. Continuous re‑scanning on VirusTotal or similar platforms is advised to capture any changes in detection scores.