dainty-genie-0d89d1[.]netlify[.]app

The domain dainty-genie-0d89d1.netlify.app has been identified as a high-risk malicious site engaged in brand impersonation, specifically targeting Google. No drainer kit was detected during the analysis.

Analysis indicates that the domain has been flagged by 18 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain is registered through Name.com, Inc, a registrar commonly used for Netlify-hosted sites. It resolves to the IP address 35.157.26.135, which is located in Germany (DE) and is part of the AS16509 autonomous system operated by Amazon.com, Inc. The domain was created on February 21, 2026, and has been flagged by Google Safe Browsing for phishing. It also appears on one known security blocklist, further corroborating its malicious nature.

The domain is currently offline, and it has been blocked by PhishDestroy. Despite its current offline status, the domain remains a high-risk threat due to its recent creation and the significant number of flags from security vendors and blocklists. Organizations and individuals are advised to remain vigilant and avoid any engagement with this domain. Regular security checks and user education on identifying brand impersonation and phishing attempts are recommended to mitigate the remaining risk.