gleeful-florentine-0a05ec[.]netlify[.]app

Analysis conducted on August 03, 2026 identifies gleeful-florentine-0a05ec.netlify.app as an active high-risk phishing domain specializing in social engineering. The domain is hosted on Netlify's platform, a legitimate static-site provider frequently exploited for low-cost, disposable phishing pages. Google Safe Browsing explicitly classifies the site as engaging in social engineering, a designation reserved for pages that deceive users into divulging sensitive information or performing harmful actions. Detection data from VirusTotal indicates that 13 of 91 security vendors have flagged the domain, a detection rate consistent with confirmed phishing infrastructure.

The domain appears on at least one security blocklist, further corroborating its malicious classification. Infrastructure analysis reveals no underlying IP address or autonomous system number (ASN) in the provided intelligence, as the domain resolves through Netlify's shared hosting environment. The registrar is Netlify itself, which does not require traditional WHOIS registration details for subdomains under its app platform. No SSL certificate anomalies or HTTP status errors were reported, suggesting the site is fully operational and accessible.

The exact content and targeted brand remain unconfirmed, as no page title, phishing kit, or brand target was provided in the available evidence. Defenders should treat this domain as a confirmed social engineering threat and block access at the network level. Organizations using Netlify for legitimate purposes should monitor for unauthorized subdomain deployments and implement stricter access controls to prevent abuse of their hosting services.