amarelinho-novidade[.]netlify[.]app

The domain amarelinho-novidade.netlify.app was identified as a generic phishing site targeting users with fraudulent login or credential harvesting schemes. It did not impersonate a specific brand but displayed the page title 'Will Bank - Soluções de Crédito', potentially misleading victims into believing it was related to financial services. As of the latest verification, amarelinho-novidade.netlify.app has been taken offline, though its prior activity posed a risk of credential theft or unauthorized account access.

Technical analysis of amarelinho-novidade.netlify.app revealed 0 of 95 VirusTotal vendors flagged the domain as malicious, and Google Safe Browsing did not detect it as a threat. The domain was registered through Netlify and resolved to the IP address 18.208.88.157, hosted on Amazon.com, Inc. infrastructure (AS14618) in the US. It appeared on 1 security blocklist (PhishDestroy) and used an SSL certificate issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1). The observed HTTP status was 404, and technologies detected included Netlify and HSTS.

Users who may have interacted with amarelinho-novidade.netlify.app should immediately change any passwords entered on the site, particularly for financial or sensitive accounts. Enabling two-factor authentication (2FA) on all critical services is strongly recommended to prevent unauthorized access. Victims should monitor their accounts for suspicious activity, such as unauthorized transactions or login attempts. To report the phishing domain, submit it to platforms like PhishTank, Google Safe Browsing, or the Netlify abuse team for further investigation and takedown.