dashboard-farlabsai[.]netlify[.]app

The domain dashboard-farlabsai.netlify.app was observed on July 23, 2026 as a high‑risk generic phishing site. The site was created on February 21, 2026 and is hosted on Amazon's infrastructure (AS16509) with the IPv4 address 63.176.8.218 located in Germany. Netlify is listed as the registrar (Name.com, Inc.) and the deployment platform, as indicated by the Netlify technology fingerprint and the presence of HSTS. The TLS certificate is issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1, confirming a valid HTTPS endpoint despite the site being offline. The page title returned was “Password Protection” and the HTTP response was 404, indicating the content was not reachable at the time of analysis.

VirusTotal recorded 13 detections out of 93 scanning engines, and the domain appears on three public blocklists. Google Safe Browsing classifies the URL as a social engineering threat. Additional blocklist sources that have flagged the domain include PhishDestroy, MetaMask, and SEAL. The nameservers resolve to dns1.p01.nsone.net, dns2.p01.nsone.net, dns3.p01.nsone.net, and dns4.p01.nsone.net.

No further page content was captured because the site is offline; consequently the specific lure, credential‑capture mechanism, or targeted brand cannot be confirmed. Defenders should add the domain and its IP address to deny lists, monitor DNS queries for the associated NS records, and enforce web‑filtering rules that block any HTTP(S) request to the host. Because the infrastructure uses a shared Netlify environment, related subdomains may be provisioned rapidly; continuous monitoring of Netlify‑related subdomains for similar indicators is advised. Incident response teams should treat any credential submissions to this host as compromised and advise affected users to reset passwords.