# PhishDestroy domain threat record: premier-identity-practice.netlify.app

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/premier-identity-practice.netlify.app/
Machine-readable companion: https://phishdestroy.io/domain/premier-identity-practice.netlify.app/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-26 16:19:51 UTC
- Last availability or vendor check: 2026-10-26 16:19:51 UTC
- Stored record updated: 2026-10-26 20:12:04 UTC
- Independent public blocklist matches in the stored snapshot: 1
- Matching public blocklists: OpenPhish
- Google Safe Browsing stored result: no stored flag

## Stored classification

- Targeted brand: Facebook

## Stored infrastructure

- Observed IP address: 63.176.8.218
- Registrar in stored WHOIS data: Netlify
- Last stored HTTP status: 200
- Registration date (registry RDAP, netlify.app): 2018-05-08 22:48:05 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a17901-64c0-742f-b8c4-dcb7d4ed0f14/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/premier-identity-practice.netlify.app
- Certificate Transparency search: https://crt.sh/?q=%25.premier-identity-practice.netlify.app
- Web Archive lookup: https://web.archive.org/web/*/https://premier-identity-practice.netlify.app/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
The captured screenshot shows a landing page headed Build beautiful software faster with Sign Up and View demo buttons, describing Saas UI as a React component library and displaying a Powered by Netlify badge. The recorded page title was Official Notice from Facebook. PhishDestroy classified the domain as impersonation phishing on 2026-10-26, its first-seen date.

How the scam works
Visitors were steered toward a sign-up style offer under an official Facebook notice, so anything entered into such a form would be transmitted to whoever controls the page rather than to the impersonated service. This credential harvesting pattern is the standard risk behind lookalike notice pages.

Evidence
The captured screenshot shows the SaaS sign-up lure with Next.js and Chakra UI branding, while site inspection logged Next.js and React globals, 31 requests, 26 tracker requests, and 10 distinct script SHA256 hashes, one beginning a08cdd7b8032. urlscan scored the engines at 93 and malicious on 2026-10-26, recorded an HTTP-to-HTTPS 307 redirect funnel, yet its overall verdict was not malicious. VirusTotal flagged the domain as malicious, with Sophos labelling it phishing and fraud. Google Safe Browsing and Spamhaus were not flagged, OpenPhish and the PhishDestroy blocklists listed it, and OTX recorded 0 pulses, all checked 2026-10-26.

Infrastructure
No Content-Security-Policy, X-Frame-Options, Referrer-Policy, Permissions-Policy or COOP/COEP/CORP; HSTS and X-Content-Type-Options present; TLS 1.3, AES-128-GCM, forward secrecy, ALPN h2; no SPF, DKIM or DMARC recorded; CAA present; DNSSEC unsigned. Hosting was Netlify on the Amazon.com, Inc. network, with no registrar or WAF recorded.

What to do
If you submitted credentials on this page, change your password on the genuine Facebook service and enable two-factor authentication, and treat unsolicited messages using the same lure with caution. Defenders should block premier-identity-practice.netlify.app and hunt for the recorded script hash a08cdd7b8032.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/01a17901-64c0-742f-b8c4-dcb7d4ed0f14/
Stored capture screenshot: https://i.ibb.co/pN69Vwj/75958db048d2.png
URLScan screenshot (2026-10-26T00:47:29Z): https://screenshots.phishdestroy.io/us/01a175ad-116c-76ae-a5eb-bc45f93ff5d0.png
URLScan capture report: https://urlscan.io/result/01a175ad-116c-76ae-a5eb-bc45f93ff5d0/
URLScan screenshot (2026-10-26T09:46:05Z): https://screenshots.phishdestroy.io/us/01a1779a-1bf9-71a0-be2b-98e7db1540fb.png
URLScan capture report: https://urlscan.io/result/01a1779a-1bf9-71a0-be2b-98e7db1540fb/
URLScan screenshot (2026-10-26T13:03:47Z): https://screenshots.phishdestroy.io/us/01a1784f-2fb0-719e-87c8-e80624fdbb60.png
URLScan capture report: https://urlscan.io/result/01a1784f-2fb0-719e-87c8-e80624fdbb60/
VirusTotal report: https://www.virustotal.com/gui/domain/premier-identity-practice.netlify.app
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=premier-identity-practice.netlify.app
Archived copy: https://web.archive.org/web/20261026161709/https://premier-identity-practice.netlify.app/
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-26 20:12:04 UTC

## Stored page captures

- Primary capture: https://i.ibb.co/pN69Vwj/75958db048d2.png
  Captured: 2026-10-26 16:19:51 UTC
- URLScan capture 1: https://screenshots.phishdestroy.io/01a17901-64c0-742f-b8c4-dcb7d4ed0f14.png
  Captured: 2026-10-26 16:19:51 UTC
  Source report: https://urlscan.io/result/01a17901-64c0-742f-b8c4-dcb7d4ed0f14/
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a1784f-2fb0-719e-87c8-e80624fdbb60.png
  Captured: 2026-10-26 13:03:47 UTC
  Source report: https://urlscan.io/result/01a1784f-2fb0-719e-87c8-e80624fdbb60/
  SHA-256: 00444b82a7ea94cd910f39348f8556ed762b441a2f97cccf520933c3f56455c2
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a175ad-116c-76ae-a5eb-bc45f93ff5d0.png
  Captured: 2026-10-26 00:47:29 UTC
  Source report: https://urlscan.io/result/01a175ad-116c-76ae-a5eb-bc45f93ff5d0/
  SHA-256: 00444b82a7ea94cd910f39348f8556ed762b441a2f97cccf520933c3f56455c2
- URLScan · 2026-10-26: https://screenshots.phishdestroy.io/us/01a1779a-1bf9-71a0-be2b-98e7db1540fb.png
  Captured: 2026-10-26 09:46:05 UTC
  Source report: https://urlscan.io/result/01a1779a-1bf9-71a0-be2b-98e7db1540fb/
  SHA-256: 00444b82a7ea94cd910f39348f8556ed762b441a2f97cccf520933c3f56455c2

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-26T16:32:56Z",
        "uuid": "01a17901-64c0-742f-b8c4-dcb7d4ed0f14",
        "scanned_at": "2026-10-26T16:18:26Z",
        "final_url": "https://premier-identity-practice.netlify.app/verified-for-business",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://premier-identity-practice.netlify.app/verified-for-business",
                "from": "http://premier-identity-practice.netlify.app/verified-for-business",
                "status": 307
            }
        ],
        "ip": "2a05:d014:58f:6200::258",
        "domains": [
            "pbs.twimg.com",
            "api.ipify.org",
            "static.xx.fbcdn.net"
        ],
        "ips": [
            "2a04:4e42:8d::159",
            "104.26.13.205",
            "57.144.244.128",
            "2a05:d014:58f:6200::258"
        ],
        "asns": [
            "54113",
            "13335",
            "32934",
            "16509"
        ],
        "countries": [
            "DE"
        ],
        "link_domains": [
            "app.netlify.com",
            "demo.saas-ui.dev",
            "turborepo.com",
            "appulse.gumroad.com"
        ],
        "doc_hash": "d615f68596ed979ce6e73aae5855666d78ac953bcc4b0ab708ff46221f47d935",
        "script_hashes": [
            "a08cdd7b803216aa9d23646ba8d61832f67661c10585f124a85d68699d216fd5",
            "19c12df7de8a44b51eb546d426d05b7d8de36e885d97469958f40ac6f2f705b2",
            "bba2f0c5d32323c5f9e0375569daa9249c5becf105eeba2e6e678fdcb90d0861",
            "68f16d67acdef50544681828146acf61f2d28d6d8bc2212484a80a196d85f95d",
            "8f6a91b2dae212f5acd02982955970ed3052f1d96b02f24dfbc4c7dbd38dcf82",
            "77b400cbcaf1ae6b4ca89671a7f0bd7e899d5070da6f803c768250f3d23f99b3",
            "4bff6059159540784418373ed5b92b65a9e8afad65d7a4b579621b643640074c",
            "4d4047e94370ccbc800dd09843a207ea9f76952cd43e5c2e820564769e4f4796",
            "7199e21d4bb32c3e784b57ff22bde1448b2d6b80d14cfebe952f6b1d0edf8a36",
            "2bc502f713afd82c26adb824678365c9ff70534c7914f09e8249be984ab045c6"
        ],
        "globals": [
            "a13_0x215f81",
            "a13_0x10df",
            "a13_0x501042",
            "a13_0x2d1e1f",
            "a13_0x4fd7",
            "webpackChunk_N_E",
            "a1_0x128bb7",
            "a1_0x4d29",
            "a1_0x1d65",
            "a1_0x2925b8",
            "a1_0x3540c6",
            "a14_0x2f6b3e",
            "a14_0x595019",
            "a14_0x2010ed",
            "a14_0x15ea",
            "a14_0x3727",
            "__next_f",
            "a11_0x2dd2",
            "a11_0x13ba",
            "a27_0x4362",
            "a27_0x171b",
            "a5_0x42a1",
            "a5_0x3973",
            "a7_0x32be",
            "a7_0x45a4",
            "a22_0x25a7db",
            "a22_0x445f",
            "a22_0x297ec",
            "a22_0x30b616",
            "a22_0x59a1",
            "a19_0x5473",
            "a19_0x5768",
            "a21_0x717d",
            "a21_0xf33f",
            "a20_0x4acef7",
            "a20_0x5252",
            "a20_0x2150",
            "a20_0x235010",
            "a20_0x26444d",
            "a24_0x439a"
        ],
        "storage_keys": [
            "chakra-ui-color-mode"
        ],
        "tls": {
            "san": [
                "*.netlify.app",
                "netlify.app"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "subject": "*.netlify.app",
            "protocol": "TLS 1.3",
            "valid_to": "2027-03-19T23:59:59Z",
            "valid_from": "2026-02-16T00:00:00Z"
        },
        "domain_age_days": 1,
        "apex_age_days": 1,
        "tls_age_days": 252,
        "tls_valid_days": 396,
        "requests": 31,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 93,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "Netlify",
            "content-type": "text/html; charset=utf-8",
            "x-powered-by": "Next.js",
            "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
            "x-content-type-options": "nosniff"
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-26T16:33:24Z",
        "analysis_at": "2026-10-26T12:09:07Z",
        "stats": {
            "timeout": 0,
            "harmless": 50,
            "malicious": 7,
            "suspicious": 1,
            "undetected": 34
        },
        "detections": {
            "ESET": "phishing",
            "G-Data": "phishing",
            "Sophos": "phishing",
            "Webroot": "malicious",
            "Emsisoft": "phishing",
            "Netcraft": "malicious",
            "SOCRadar": "suspicious",
            "Kaspersky": "phishing"
        },
        "reputation": 0,
        "categories": {
            "Sophos": "phishing and fraud",
            "Webroot": "Phishing and Other Frauds",
            "Forcepoint ThreatSeeker": "information technology"
        },
        "registrar": "Name.com, Inc.",
        "created": "2018-05-08T22:48:05Z",
        "expires": "2025-05-08T22:48:05Z",
        "updated": "2024-04-11T16:00:14Z",
        "first_seen": "2026-10-26T00:35:08Z",
        "dns": [
            {
                "ttl": 311,
                "type": "AAAA",
                "value": "2600:1f18:16e:df01::259"
            },
            {
                "ttl": 120,
                "type": "A",
                "value": "18.208.88.157"
            },
            {
                "ttl": 120,
                "type": "A",
                "value": "98.84.224.111"
            },
            {
                "ttl": 311,
                "type": "AAAA",
                "value": "2600:1f18:16e:df01::258"
            }
        ],
        "dns_at": "2026-10-26T12:09:26Z",
        "jarm": "40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319",
        "cert": {
            "san": [
                "*.netlify.app",
                "netlify.app"
            ],
            "issuer": "DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "serial": "cd5d0afb0611b5bd9d692535c0ca7c4",
            "sha256": "bc3a8134c21a842e64ea34d488826dd2ba50f59a3bcbaed1e6b71a4242de1478",
            "subject": "*.netlify.app",
            "valid_to": "2027-03-19T23:59:59Z",
            "valid_from": "2026-02-16T00:00:00Z"
        },
        "whois": {
            "registrar": "Name.com, Inc.",
            "registrar_iana_id": "625",
            "registrar_url": "http://www.name.com",
            "created": "2018-05-08T22:48:05Z",
            "updated": "2024-04-11T16:00:14Z",
            "expires": "2025-05-08T22:48:05Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "dns1.p01.nsone.net",
                "dns2.p01.nsone.net",
                "dns3.p01.nsone.net",
                "dns4.p01.nsone.net"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-26T16:53:51Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "count": 2,
            "domain": "netlify.app",
            "issuers": [
                "digicert.com;account=2d83e9ac9b6776c3f215150f6ebceea8cefe3bc2e1fb5efffb1d71e200575226"
            ]
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-10-26T16:17:09Z",
            "first": "2026-10-26T16:17:09Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 39253
        },
        "social_tags": {
            "title": "Saas UI Landingspage",
            "description": "Free SaaS landingspage starter kit"
        },
        "trackers": {
            "requests": 26
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 33,
                "tls": 22,
                "wait": 889,
                "connect": 11,
                "download": 23
            },
            "response_ms": 978
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_128_GCM_SHA256",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443
            ]
        },
        "carbon": {
            "bytes": 144030,
            "co2_grams": 0.0053,
            "cleaner_than": 14
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "198.51.44.1",
                    "host": "dns1.p01.nsone.net"
                },
                {
                    "ip": "198.51.45.1",
                    "host": "dns2.p01.nsone.net"
                },
                {
                    "ip": "198.51.44.65",
                    "host": "dns3.p01.nsone.net"
                },
                {
                    "ip": "198.51.45.65",
                    "host": "dns4.p01.nsone.net"
                }
            ],
            "zone": "netlify.app"
        },
        "location": {
            "ip": "2a05:d014:58f:6200::258",
            "asn": "16509",
            "org": "Amazon.com, Inc.",
            "city": "Frankfurt",
            "country": "DE"
        },
        "ssl": {
            "issuer": "DigiCert Inc / DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "subject": "*.netlify.app"
        },
        "dns": {
            "A": [
                "63.176.8.218",
                "35.157.26.135"
            ],
            "AAAA": [
                "2a05:d014:58f:6200::259",
                "2a05:d014:58f:6200::258"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "header": "max-age=31536000; includeSubDomains; preload",
            "message": "Site is compatible with the HSTS preload list!",
            "compatible": true
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": "nosniff",
            "contentSecurityPolicy": false,
            "strictTransportPolicy": "max-age=31536000; includeSubDomains; preload",
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "get_ip": {
            "ip": "2a05:d014:58f:6200::259",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://premier-identity-practice.netlify.app"
            ]
        },
        "linked_pages": {
            "external": [
                "https://demo.saas-ui.dev/",
                "https://turborepo.com/",
                "https://appulse.gumroad.com/l/saas-ui-pro-pre-order",
                "https://appulse.gumroad.com/l/saas-ui-pro-pre-order",
                "https://twitter.com/Pagebakers",
                "https://twitter.com/saas_js",
                "https://github.com/saas-js/saas-ui"
            ],
            "external_count": 7,
            "internal_count": 6
        },
        "headers": {
            "headers": {
                "server": "Netlify",
                "content-type": "text/html; charset=utf-8",
                "x-powered-by": "Next.js",
                "strict-transport-security": "max-age=31536000; includeSubDomains; preload",
                "x-content-type-options": "nosniff"
            }
        }
    }
}
```