accountcenter-reviewtask-fds101v0c[.]netlify[.]app

The domain accountcenter-reviewtask-fds101v0c.netlify.app is currently active and has been identified as a credential‑phishing site. The page title observed on the host is “Password Protection,” indicating an attempt to harvest user credentials. Registration was performed through the Netlify hosting platform, and the site enforces HTTP Strict Transport Security (HSTS).

Network analysis shows the domain resolves to the IPv6 address 2600:1f18:16e:df01::258, which is owned by Amazon.com, Inc. (AS14618) and geographically mapped to the United States. The TLS certificate presented is a DigiCert Global G2 RSA SHA‑256 certificate issued in 2020, confirming a valid SSL chain but offering no indication of malicious intent.

Reputation services assign extremely low trust scores: Gridinsoft rates the domain 0/100 and Scamadviser 1/100. VirusTotal reports that 18 out of 95 scanning engines flag the site as malicious, and the domain appears on two public phishing blocklists, including PhishDestroy and PhishingDB. These signals collectively raise the risk rating to high. No additional public indicators, such as observed payloads or phishing email samples, have been released, leaving the exact phishing kit or lure details unknown.

Defenders should block any network traffic to the domain and its resolved IP address, and add the host to local and upstream DNS deny lists. Monitoring for outbound connections to the AS14618 address space can help detect compromised clients attempting to contact the server. Continuous watch of the domain’s status on threat‑intel feeds is advised, as the active flag suggests the campaign may still be in operation.