wondrous-dolphin-16efc3[.]netlify[.]app

Analysis indicates that wondrous-dolphin-16efc3.netlify.app is currently active and classified as a generic phishing threat with a high risk rating. The domain resolves to the IP address 35.157.26.135 and is registered through the Netlify hosting platform. Nameserver information could not be retrieved (NS_NOT_FOUND), which limits visibility into the authoritative DNS configuration.

The domain has been listed on a single security blocklist and is explicitly blocked by the PhishDestroy filtering service. VirusTotal reports that 11 of 91 security vendors have flagged the domain as malicious, providing independent confirmation of its malicious nature. No additional intelligence such as SSL certificate details, HTTP response codes, page title, or brand targeting is available at this time, leaving the exact content and attack vector of the hosted page unknown.

Defenders should treat the domain as hostile: block network traffic to 35.157.26.135 and to the domain name itself, add the domain to internal blocklists, and monitor for any future resolution changes. Continuous re‑evaluation is advised, as the lack of visible page metadata means that the phishing campaign could evolve or adopt new tactics. Organizations using Netlify‑based assets should verify that no unauthorized sub‑domains have been created under their account, and incident response teams should collect any DNS query logs that reference this domain for further forensic correlation.