awsweb3apprunner-east0nsitecom[.]netlify[.]app

The domain awsweb3apprunner-east0nsitecom.netlify.app is currently active and has been identified as a credential‑phishing site. Infrastructure analysis shows that the domain is registered through Netlify, a popular static‑site hosting provider, and no additional registrar details are disclosed. It appears on a single security blocklist and is explicitly blocked by PhishDestroy, indicating that at least one trusted anti‑phishing feed has taken action against it.

VirusTotal scans report that 12 of 91 security vendors flag the domain as malicious, providing a modest but notable consensus of concern among scanning engines. No public Safe Browsing, Open Threat Exchange (OTX), SSL certificate, HTTP status code, or trust‑score information is available in the supplied intelligence, and the hosting IP address or ASN has not been disclosed. The limited visibility suggests that the site may be using Netlify’s shared infrastructure, which can obscure exact server location.

Defenders should immediately add the domain to URL filtering and DNS block policies, monitor outbound connections for attempts to resolve or contact the host, and consider sharing the indicator with broader threat‑intel platforms to improve collective detection. Continuous re‑scanning with VirusTotal and periodic checks against emerging blocklists are advised, as the threat landscape around this domain may evolve.