thunderous-brigadeiros-0344cb[.]netlify[.]app

The domain thunderous-brigadeiros-0344cb.netlify.app has been identified as an active credential theft phishing site, currently impersonating a professional email sign-in page to steal user login credentials. The site remains operational and poses a high risk to anyone who may encounter it. This domain was registered through Netlify and resolves to IP address 63.176.8.218, with a creation date of April 14, 2026.

Analysis from VirusTotal shows that 21 out of 95 security vendors flag this domain as malicious, and it currently appears on one security blocklist. The page title is "Sign in - Professional Email," and the SSL certificate is issued by DigiCert Inc, using DigiCert Global G2 TLS RSA SHA256 2020 CA1. The combination of a low blocklist count but significant vendor detection suggests this is a relatively new but already widely recognized threat.

Given that the domain is still active and the phishing page is live, immediate action is recommended. Users should block access to this domain at the network or email gateway level, and any employees or individuals who may have entered credentials on this site should change their passwords immediately and enable multi-factor authentication. PhishDestroy recommends adding this domain to all blocklists and monitoring for similar Netlify-hosted phishing campaigns.