kaleidoscopic-bonbon-527150[.]netlify[.]app

On 25 July 2026 the domain kaleidoscopic-bonbon-527150.netlify.app was observed to return an HTTP 404 status with the page title “Site not found”. The site is currently offline, and its hosting infrastructure points to the IP address 98.84.224.111, which is registered to Amazon.com, Inc. (AS14618) in the United States. Registration data shows the domain was created on 21 February 2026 through Name.com, Inc., a registrar commonly used for Netlify‑hosted sites. The TLS certificate presented by the server is a DigiCert Global G2 TLS RSA SHA256 2020 CA1 chain issued by DigiCert Inc., indicating standard HTTPS protection but not mitigating the phishing risk.

VirusTotal records indicate that 16 of 93 security engines flagged the domain as malicious, providing an early indication of suspicious behavior. The domain appears on a single public blocklist and is actively blocked by the PhishDestroy service. Automated technology fingerprinting identified the use of Netlify as the content‑delivery platform, along with HTTP Strict Transport Security (HSTS) enforced by the DigiCert certificate. No additional payload or credential‑stealing page was captured; the only visible artifact is the generic “Site not found” title, suggesting the phishing content has been removed or the site was taken down after detection.

Given the limited exposure window, defenders should continue to enforce blocklisting of the domain at network perimeter devices and update URL filtering rules to include the observed IP address range associated with the Amazon AS14618 infrastructure. Monitoring for new subdomains or similar Netlify‑based deployments that share the same registration pattern may help identify related campaigns. Incident response teams are advised to treat any future appearances of this domain as a potential credential‑collection vector until further forensic evidence is obtained.