wbillbell[.]netlify[.]app

On 2026-08-07, wbillbell.netlify.app was classified as a generic phishing site with an elevated risk rating. The domain resolves to the IPv4 address 63.176.8.218, which is associated with the Netlify hosting platform. Static analysis on VirusTotal returned detections from 15 of 91 scanned security vendors, indicating a moderate level of consensus among scanners that the host may be malicious.

The domain is listed on a single external blocklist and is actively blocked by the PhishDestroy service, providing additional confirmation of its hostile intent. The current infrastructure details, such as registrar information, SSL certificate parameters, and HTTP response codes, were not supplied and therefore remain unknown. No public Safe Browsing or OTX entries were referenced in the available intelligence, and no page title or brand identifiers have been disclosed, limiting the ability to attribute the phishing campaign to a specific victim brand.

Defenders should prioritize blocking traffic to 63.176.8.218 and adding wbillbell.netlify.app to internal deny lists. Continuous monitoring of the domain’s DNS resolution and periodic rescanning on VirusTotal are recommended to capture any changes in detection rates or additional vendor flags. Given the active status and the presence on at least one blocklist, organizations should treat any email or web interaction involving this domain as potentially malicious until further verification can be performed.