statutrust-disciplinarym-fds1410vc[.]netlify[.]app

This domain, statutrust-disciplinarym-fds1410vc.netlify.app, is actively flagged as a high-risk credential phishing site. Infrastructure analysis reveals it was registered on October 29, 2025, through Netlify, a platform commonly used for hosting both legitimate and malicious content. The page title, 'Password Protection,' suggests an attempt to deceive users into submitting login credentials, though the exact content and targeted brand remain unconfirmed at this stage. The domain resolves to an IPv6 address (2a05:d014:58f:6200::259) within the Amazon.com, Inc. network (AS16509), located in Germany. Technical indicators further support the classification of this domain as malicious. It is currently blocked by two security blocklists, including PhishDestroy and PhishingDB, and is flagged by 15 out of 95 security vendors on VirusTotal. The SSL certificate, issued by DigiCert Inc under the 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' chain, is consistent with legitimate encryption practices but does not mitigate the domain's malicious intent. The presence of HSTS (HTTP Strict Transport Security) and Netlify's hosting infrastructure indicates an effort to appear trustworthy while concealing the phishing operation. Defenders should treat this domain as an active threat. The 301 HTTP status code suggests it may redirect users to another malicious endpoint, though the destination remains unconfirmed. Given its recent registration and low trust score (0/100), organizations are advised to block traffic to this domain at the network level and monitor for related indicators of compromise. While the exact phishing kit or targeted sector is not yet identified, the combination of credential-themed page titles and active blocklist listings justifies immediate containment measures. Further analysis of associated infrastructure, such as nameservers (dns1.p04.nsone.net, dns2.p04.nsone.net), may reveal additional linked domains or campaigns.