scintillating-crostata-8898c8[.]netlify[.]app

On 24 July 2026 the domain scintillating-crostata-8898c8.netlify.app was observed actively serving content and is currently resolved to the IPv4 address 35.157.26.135. The domain is hosted on Netlify, as indicated by the registration information, and its authoritative nameserver records could not be retrieved (NS_NOT_FOUND). Threat intelligence feeds have listed the domain on two phishing blocklists—PhishDestroy and OpenPhish—confirming that it is being used for phishing purposes. VirusTotal analysis shows that 14 out of 91 scanning engines flagged the site as malicious, reinforcing the blocklist findings.

No additional metadata such as page title, SSL certificate details, or HTTP response codes were provided, so the exact content and target brand of the counterfeit page remain unknown. The lack of visible page‑level indicators limits attribution, but the convergence of multiple independent detections indicates a high‑confidence malicious profile. Defenders should add the domain and its resolving IP address to deny‑list rules on firewalls, DNS filters, and endpoint protection solutions.

Continuous monitoring of Netlify‑hosted subdomains is recommended because the platform permits rapid creation of new phishing sites. Analysts should also query Netlify’s abuse‑reporting API for takedown requests and watch for any related domains that resolve to the same IP range. Because the site is still active, prompt blocking is advised to mitigate credential‑stealing attempts.