getnewaccount[.]atk3[.]com

This domain, getnewaccount.atk3.com, is a credential phishing site designed to steal Netflix account credentials. The page title, written in Arabic as "حسابات نتفلكس" (Netflix Accounts), suggests it targets users seeking free or discounted streaming access. Credential phishing sites like this one often mimic legitimate login pages to trick visitors into entering their usernames and passwords, which are then harvested by threat actors for unauthorized access, account resale, or further malicious activity such as fraud or identity theft. Analysis indicates this domain is part of a broader phishing infrastructure. It was registered on September 10, 2023, through Spaceship, Inc., and resolves to the IP address 107.6.151.38. The site uses a Let’s Encrypt SSL certificate, which, while providing encryption, is commonly exploited by phishing sites to appear legitimate. Security vendors have flagged this domain as malicious, with 8 out of 95 engines on VirusTotal detecting it as a threat. Additionally, it appears on one security blocklist and has been assigned a trust score of 0/100 by Gridinsoft, further confirming its malicious nature. The domain is currently offline, but its infrastructure may still pose risks if reactivated or repurposed. If you visited getnewaccount.atk3.com or entered any credentials on the site, immediate action is required. First, change the password for your Netflix account and any other platforms where the same credentials may have been reused. Enable multi-factor authentication (MFA) on all accounts to add an extra layer of security. Monitor your accounts for unauthorized activity, such as unfamiliar logins or changes to account settings. If financial information was entered, contact your bank or payment provider to report potential fraud. Finally, consider running a scan with updated security software to detect any malware that may have been installed during the visit.