incredible-kelpie-0d151e[.]netlify[.]app

The domain incredible-kelpie-0d151e.netlify.app has been identified as a generic phishing site, impersonating the popular music streaming service Spotify. This domain was registered through Netlify and was used to deceive users into providing sensitive information such as login credentials or financial data.

Technical analysis reveals that the domain was created on May 09, 2018, and is associated with the IP address 2406:da18:b3d:e201::259, located in Singapore (SG) under the Autonomous System Number AS16509, operated by Amazon.com, Inc. The domain's SSL certificate is issued by DigiCert Inc, specifically the DigiCert Global G2 TLS RSA SHA256 2020 CA1. According to VirusTotal, 18 out of 95 security vendors have flagged this domain as malicious. The domain has also been blocked by the security service PhishDestroy and appears on 1 security blocklist. It is currently listed as offline in the Google Safe Browsing database.

As of the latest assessment, the domain is taken offline, reducing the immediate risk to potential victims. However, the domain's past activity and its detection by multiple security vendors indicate a significant threat level. Organizations and individuals are advised to ensure that their security systems are updated to block this domain and to educate users about the dangers of visiting unfamiliar or suspicious sites, especially those impersonating well-known brands. The domain's association with a reputable registrar and a valid SSL certificate underscores the need for vigilant security practices, as these elements can lend a false sense of legitimacy to phishing sites.