namratabnbclone[.]netlify[.]app

On July 24, 2026 analysis was performed on the domain namratabnbclone.netlify.app. The site returned HTTP 404 with the page title “Site not found”, indicating that the content is no longer publicly reachable. VirusTotal recorded 14 detections out of 95 scanning engines, suggesting that a subset of security products identified malicious characteristics. The domain is hosted on Netlify, as indicated by the presence of Netlify and HSTS in the technology fingerprint, and resolves to the IP address 98.84.224.111, which belongs to Amazon.com, Inc. (ASN 14618) located in the United States.

The TLS certificate is issued by DigiCert Inc, using the DigiCert Global G2 TLS RSA SHA256 2020 CA1 chain, confirming a valid certificate for the Netlify service. The domain has been listed on one public security blocklist and is actively blocked by the PhishDestroy filtering engine. Intelligence classifies the threat as a “Crypto Scam”, though no additional payload, wallet address, or phishing kit has been observed.

The lack of live content prevents verification of the exact phishing vector or the targeted cryptocurrency platform. Defenders should continue to monitor the domain for possible re‑activation, ensure upstream filters incorporate the current blocklist entry, and advise end users to avoid any unsolicited messages that reference the domain. Further forensic capture of HTTP responses, if the site resurfaces, would be required to determine the exact attack flow and any credential‑harvesting mechanisms.