glowing-pie-dac1e0[.]netlify[.]app

The domain glowing-pie-dac1e0.netlify.app is a generic phishing site designed to steal user credentials, specifically targeting banking login information. No specific brand impersonation or crypto drainer kit was identified. As of the latest verification, glowing-pie-dac1e0.netlify.app has been taken offline, though it previously posed an elevated risk of credential theft.

Technical analysis of glowing-pie-dac1e0.netlify.app shows 1 of 95 VirusTotal security vendors flagged the domain, while Google Safe Browsing did not detect it. The domain appears on 1 security blocklist (PhishDestroy) and is registered through Netlify. It resolved to the IP address 63.176.8.218, hosted on Amazon.com, Inc. infrastructure (AS16509) in Germany. The SSL certificate was issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1), and the observed page title was 'Site not found' with an HTTP 404 status. Nameservers for the domain are dns1.p04.nsone.net and dns2.p04.nsone.net, and technologies detected include Netlify and HSTS.

Users who may have interacted with glowing-pie-dac1e0.netlify.app should immediately change any exposed banking or financial credentials and enable two-factor authentication (2FA) on all accounts. Monitor bank statements and credit reports for unauthorized activity. Report the phishing domain to Netlify’s abuse team and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in takedown efforts.