dechain08[.]netlify[.]app

The domain dechain08.netlify.app is flagged as a high‑risk generic phishing site and is currently offline, returning a 404 "Site not found" page. Infrastructure analysis shows the domain is hosted on Netlify, as indicated by the Netlify technology tag and the use of HSTS, and it resolves to the IP address 63.176.8.218, which belongs to Amazon.com, Inc. (AS16509) located in Germany. The SSL certificate presented is a DigiCert Global G2 TLS RSA SHA256 2020 CA1 issued by DigiCert Inc, confirming a valid TLS layer despite the site’s malicious classification. The domain is registered through Netlify, and its authoritative name servers are dns1.p04.nsone.net and dns2.p04.nsone.net.

Reputation services have assigned a Scamadviser trust score of 1 out of 100, and the domain appears on five separate security blocklists, including PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. VirusTotal analysis shows that 15 of 95 scanning engines flagged the domain, corroborating its malicious nature. The combination of a low trust score, multiple blocklist listings, and a notable detection count provides strong evidence of phishing intent, even though the exact phishing content or targeted brand has not been captured.

Uncertainty remains regarding the specific payload or credential‑harvesting mechanisms that may have been hosted before the site went offline, as no page content beyond the generic title is available. Defenders should continue to block the domain at perimeter and endpoint layers, monitor DNS queries for re‑registration or resurrection, and consider adding the IP address 63.176.8.218 to threat‑intel feeds. Ongoing surveillance of Netlify‑hosted assets is advised, given the platform’s frequent misuse by threat actors.