accountcenter-lawsector-brr11x10brq[.]netlify[.]app

This domain, accountcenter-lawsector-brr11x10brq.netlify.app, is identified as a credential phishing threat targeting legal sector professionals. Analysis indicates the domain is actively harvesting login credentials through a fraudulent password protection interface, with the page title explicitly displaying 'Password Protection'. The threat type is classified as high-risk due to its ongoing operational status and direct targeting of sensitive authentication data. Infrastructure analysis reveals the domain is hosted on Netlify infrastructure and resolves to IP address 35.157.26.135, located in Germany under Amazon.com, Inc.'s AS16509. Security vendors have flagged this domain as malicious, with 17 out of 95 engines on VirusTotal detecting it as a phishing threat. The domain appears on two security blocklists, including PhishDestroy and PhishingDB. The SSL certificate is issued by DigiCert Inc, specifically under the DigiCert Global G2 TLS RSA SHA256 2020 CA1 chain, which is commonly observed in both legitimate and malicious deployments. Current status confirms the domain remains active and operational. Organizations are advised to implement immediate network-level blocking of the domain and its associated IP address. Security teams should monitor for credential reuse attempts from harvested data and conduct internal phishing awareness training focused on legal sector impersonation tactics. Endpoint protection rules should be updated to include this domain in denylists, and any authentication attempts originating from this infrastructure should be treated as compromised.