e12oo-06e1-36ru-eda-4gl85[.]netlify[.]app

This domain, e12oo-06e1-36ru-eda-4gl85.netlify.app, is flagged as a generic phishing threat with an elevated risk level and remains active as of July 29, 2026. It is hosted on Netlify and resolves to IP address 63.176.8.218. VirusTotal analysis shows 16 out of 91 security vendors flagging this domain as malicious, indicating moderate but not universal detection across the security industry. The domain appears on one security blocklist, specifically PhishDestroy, which has taken action against it.

No nameservers were found (NS_NOT_FOUND), which is anomalous and may suggest incomplete DNS configuration or rapid takedown evasion tactics. Safe Browsing, OTX, SSL, HTTP status, trust scores, and page title data are not available in the provided intelligence, so the exact content and nature of the phishing page remain unanalyzed. No specific brand or scam category is identified from the data; the threat is classified as generic phishing. Defenders should treat this domain as suspicious and block access at the network level.

Given the elevated risk and active status, organizations should monitor for any users who may have visited the domain and scan for potential credential theft or malware delivery. The domain should be added to blocklists and reported to Netlify for abuse. Further investigation into the IP address 63.176.8.218 and associated Netlify subdomains is recommended to identify related phishing infrastructure.