konfirmasi-hadiah-10juta-disini[.]netlify[.]app

This report assesses the domain konfirmasi-hadiah-10juta-disini.netlify.app, which is a high-risk phishing domain. On August 02, 2026, the domain is active, and VirusTotal data shows 13 out of 91 security vendors flagging it as malicious. The domain is also listed on Google Safe Browsing as engaging in social engineering, and it is blocked by PhishDestroy. It appears on one additional security blocklist. The domain is hosted on Netlify, a popular static hosting platform, which is often abused by threat actors due to its free tier and ease of deployment. The exact page content has not been analyzed, so the specific lure, such as a fake prize notification or login form, is not yet confirmed.

The domain name translates to 'confirmation-prize-10million-here' in Indonesian, suggesting a potential prize or giveaway scam, but this is an inference from the name and not from observed content. Defenders should treat all traffic to this domain as suspicious, block it at the DNS and email gateway levels, and review any users who may have submitted credentials or personal information. Given the high detection rate and active status, immediate remediation is recommended. Investigate any interactions with this domain, and consider adding it to threat intelligence feeds. The domain's use of a free hosting service indicates low operational cost for the attacker, and similar domains may emerge.

Monitoring for variants of the domain name is advised. The exact hosting IP is not known, but Netlify's shared infrastructure means blocking the entire IP range may be excessive; instead, focus on domain-based blocking. The domain is currently live, and the risk to organizations is high, especially if users are targeted through phishing emails or social media messages. No other technical details are available in the intelligence data, such as SSL certificate information or HTTP status codes.