nkosinathi-neflick-project[.]netlify[.]app

Analysis of nkosinathi-neflick-project.netlify.app as of July 24 2026 shows that the domain is actively serving a generic phishing operation. Google Safe Browsing classifies the site under social engineering, indicating it attempts to harvest credentials or personal data. The domain is hosted on Netlify, as evidenced by the registrar information, and resolves to the IP address 35.157.26.135, which belongs to the Amazon Web Services infrastructure commonly used for short‑lived malicious deployments. No authoritative nameserver records were returned (NS_NOT_FOUND), suggesting the domain’s DNS configuration may be incomplete or intentionally obscured.

VirusTotal reports that 13 of 91 scanned security vendors have flagged the host, providing independent confirmation of malicious intent. The site is listed on two public phishing blocklists and is actively blocked by PhishDestroy and OpenPhish, reinforcing its classification as a phishing source. The current HTTP response code, SSL certificate details, and page title have not been disclosed in the available intelligence, leaving the exact visual content of the page unverified.

Defenders should treat the domain as high‑risk: ingest the domain and its IP into network‑level deny lists, update email security gateways to quarantine messages containing the domain, and monitor for any outbound connections to the IP address. Continuous observation of Netlify‑hosted assets is advised, as the provider’s shared infrastructure can be leveraged for rapid redeployment of similar campaigns. Until further forensic snapshots become available, the prudent mitigation stance is to block all traffic to nkosinathi‑neflick‑project.netlify.app and its resolved IP.