puppybloxxy[.]netlify[.]app

PhishDestroy identifies puppybloxxy.netlify.app as a credential-harvesting phishing probe targeting users of a popular online gaming community. The site presents a fake login portal designed to trick visitors into submitting their account credentials, which are then captured by threat actors for unauthorized access, account takeovers, or resale on underground forums. Additional payloads, such as malware disguised as game mods or cheat tools, may also be distributed to visitors who interact with the site’s content. This domain was flagged through manual verification after zero out of 95 VirusTotal engines detected malicious activity at the time of initial analysis. It is hosted on Netlify’s infrastructure and resolves to the IP address 63.176.8.218. The SSL certificate is issued by DigiCert Inc, which does not inherently indicate legitimacy, as phishing sites frequently use valid certificates to appear trustworthy. The domain remains active and has not yet been widely blacklisted, allowing it to evade detection by automated security tools. If you visited puppybloxxy.netlify.app, take immediate action to secure your accounts. Do not enter any credentials or download files from the site. If you submitted login details, change your password on the legitimate platform and enable multi-factor authentication. Run a full antivirus scan on your device to check for malware infections. Report the domain to Netlify’s abuse team and consider submitting it to additional threat intelligence platforms like PhishTank or URLVoid to help protect other users. Monitor your accounts for suspicious activity and avoid reusing passwords across multiple sites.