earnest-mochi-110b5f[.]netlify[.]app

This domain, earnest-mochi-110b5f.netlify.app, is currently flagged as an active fake login portal designed to harvest user credentials. Analysis indicates the page impersonates a generic account management interface, as evidenced by the page title 'Account Management Portal.' The campaign remains operational, with no signs of takedown or mitigation at the time of assessment. Infrastructure analysis reveals the domain is hosted on Netlify’s platform and resolves to the IP address 18.208.88.157, located within Amazon.com, Inc.’s autonomous system AS16509 in Germany. Detection metrics show 19 of 95 security vendors on VirusTotal have classified the domain as malicious, while it appears on one public security blocklist. The SSL certificate, issued by DigiCert Inc under the 'DigiCert Global G2 TLS RSA SHA256 2020 CA1' intermediate, does not mitigate the underlying threat. Additional indicators include prior flags from Google Safe Browsing and active blocking by at least one anti-phishing feed. The risk level for this domain is assessed as high due to its operational status, credential-harvesting functionality, and persistence across detection platforms. Users are advised to avoid interaction with the domain and any associated links. Network administrators should implement blocking rules for the IP 18.208.88.157 and monitor for related subdomains under the netlify.app namespace. Organizations should also review logs for connections to this infrastructure, particularly from endpoints exhibiting anomalous authentication attempts or unexpected redirects to external portals.