boisterous-clafoutis-a6cac8[.]netlify[.]app

The domain boisterous-clafoutis-a6cac8.netlify.app was observed on 29 July 2026 as an active credential‑theft infrastructure. VirusTotal records indicate that 12 of 91 scanned security engines flagged the domain as malicious, demonstrating a moderate consensus among AV vendors. Registration details show the site was provisioned through the Netlify hosting platform, a common provider for static web applications.

DNS resolution points to the IPv4 address 63.176.8.218; no authoritative name server information could be retrieved, as the nameserver query returned NS_NOT_FOUND. The domain is listed on a single external blocklist and has been explicitly blocked by the PhishDestroy mitigation service, confirming that at least one community‑run sinkhole considers it hostile. No additional public data such as SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts are currently available, leaving the exact content of the site unverified.

Analysts should therefore treat the domain as high‑confidence malicious infrastructure, enforce network‑level deny rules for the domain and its resolved IP, and incorporate it into endpoint and email filtering policies. Continuous monitoring of the IP address and any associated Netlify sub‑accounts is recommended, as the hosting environment may be leveraged for rapid redeployment of similar phishing pages. Defenders are advised to share any newly observed indicators of compromise with threat‑sharing communities to improve collective detection.