customer-support[.]netlify[.]app

This domain, customer-support.netlify.app, operates as a credential theft phishing site designed to harvest user login credentials. Attackers likely impersonate legitimate customer support portals, tricking victims into entering sensitive information such as usernames, passwords, or multi-factor authentication codes. The site may use social engineering tactics, including fake login prompts or urgent account verification requests, to deceive users into disclosing their credentials. Analysis indicates this domain is a confirmed phishing threat, with 24 out of 95 security vendors on VirusTotal flagging it as malicious. The domain was registered on March 03, 2026, through Netlify, a platform commonly abused for hosting phishing pages due to its free and easily accessible infrastructure. Infrastructure analysis reveals the domain resolves to the IP address 35.157.26.135, located in Germany under Amazon.com, Inc.'s AS16509. The SSL certificate, issued by DigiCert Inc, does not mitigate the threat, as phishing sites frequently use valid certificates to appear legitimate. If you visited customer-support.netlify.app or entered any credentials on this site, take immediate action to secure your accounts. First, change the passwords for any accounts accessed or entered on the site, prioritizing email, financial, and work-related services. Enable multi-factor authentication (MFA) if not already active, using app-based or hardware tokens instead of SMS-based methods. Monitor your accounts for unauthorized activity, including login attempts, transactions, or password reset emails you did not initiate. If financial or sensitive work data was exposed, contact your organization’s security team or financial institution for further guidance. Report the domain to your internal security team or through official channels like Google Safe Browsing or the Anti-Phishing Working Group to aid in broader mitigation efforts.