gbeq[.]netlify[.]app

This domain, gbeq.netlify.app, is flagged as a high-risk phishing site hosted on Netlify's platform. As of July 28, 2026, the domain remains active and is listed on two security blocklists: PhishDestroy and OpenPhish. Infrastructure analysis reveals the domain resolves to IP address 63.176.8.218, though no nameserver records were found, which may indicate misconfiguration or deliberate obfuscation.

VirusTotal reports 14 of 91 security vendors detecting this domain as malicious, providing technical confirmation of its phishing classification. The domain's registration through Netlify suggests it leverages legitimate hosting services to evade initial scrutiny, a common tactic in phishing campaigns. Defenders should treat this domain as compromised and prioritize blocking it at the network level, particularly given its active status and lack of legitimate nameserver resolution.

Additional investigation into the hosting IP (63.176.8.218) may reveal related malicious infrastructure, though no further brand or kit details are currently available. The absence of a page title or scam type classification in available data means the exact phishing lure remains unconfirmed, but the domain's detection by multiple security vendors and blocklists justifies immediate defensive action. Organizations should monitor for connections to this domain in logs and consider retroactive hunting for compromised credentials if user interaction is suspected.