gmail-aman[.]netlify[.]app

The domain gmail-aman.netlify.app is currently active and flagged for brand impersonation, specifically targeting Google. The threat level is high, and the domain remains accessible on the internet. The page title found is 'Sign in - Google Accounts', which is consistent with phishing attempts aiming to trick users into providing their credentials.

Infrastructure analysis reveals that the domain resolves to the IP address 35.157.26.135, which is located in Germany and hosted on an AWS EC2 (eu-central-1) server. The domain was registered through Netlify on April 21, 2026. VirusTotal reports that 23 out of 95 security vendors flag this domain as malicious. Additionally, the domain is marked as a phishing site by Google Safe Browsing and appears on at least one security blocklist. The SSL certificate is issued by DigiCert Inc, specifically the DigiCert Global G2 TLS RSA SHA256 2020 CA1.

The current status of the domain is active, indicating that it continues to pose a threat. Security researchers and network administrators are advised to block this domain and its associated IP address to prevent potential credential theft. Users should be educated to verify the URL and look for secure connections before entering any sensitive information. Additionally, continuous monitoring and updating of security measures are recommended to mitigate the risk posed by this and similar phishing campaigns.