spiffy-snickerdoodle-d7067b[.]netlify[.]app

The domain spiffy-snickerdoodle-d7067b.netlify.app is currently active and classified as a generic phishing site with a high risk rating. Infrastructure analysis shows the domain resolves to the IP address 98.84.224.111, which is hosted by Netlify, the registered service provider. Both PhishDestroy and OpenPhish have added the domain to their phishing blocklists, confirming its malicious intent. Google Safe Browsing flags the URL for social engineering, indicating that it is being used to lure users into disclosing credentials or personal data.

VirusTotal analysis reports that 16 of 91 security vendors have flagged the domain, providing additional independent confirmation of its malicious nature. The domain also appears on two other security blocklists, reinforcing the consensus that it should be treated as hostile. Nameserver information is unavailable, and no public page title or SSL/TLS details have been disclosed, leaving the exact content and target brand of the phishing page unknown.

Defenders should immediately block the domain and its associated IP address in perimeter firewalls and proxy filters, incorporate the domain into URL filtering policies, and monitor network traffic for any connections to the Netlify hosting range. Continuous ingestion of updated threat feeds from PhishDestroy, OpenPhish, and Google Safe Browsing is recommended to capture any future variations or related domains. Given the high‑risk classification and multiple independent detections, proactive containment is essential to prevent credential harvesting or further user compromise.