s75u-zdsqx-zyof3f-rf4b0m[.]netlify[.]app

This domain, s75u-zdsqx-zyof3f-rf4b0m.netlify.app, is actively engaged in credential theft operations, designed to harvest user login credentials through deceptive login portals. Analysis of the infrastructure indicates the site mimics legitimate authentication pages, tricking visitors into submitting sensitive information such as usernames, passwords, and potentially multi-factor authentication codes. The domain employs social engineering tactics, often impersonating trusted platforms to lower user vigilance, making it particularly effective against unsuspecting targets. Infrastructure analysis reveals the domain was registered through Netlify, a legitimate hosting provider, on May 25, 2026, though this date may reflect backdating or registrar manipulation. It resolves to the IP address 63.176.8.218 and is currently flagged by 14 out of 95 security vendors on VirusTotal, indicating moderate to high detection rates. Additionally, the domain appears on one security blocklist, further corroborating its malicious classification. The SSL certificate, issued by DigiCert Inc under the DigiCert Global G2 TLS RSA SHA256 2020 CA1 chain, does not mitigate the threat, as encrypted connections are commonly exploited in phishing campaigns to appear legitimate. Users who have visited s75u-zdsqx-zyof3f-rf4b0m.netlify.app or entered credentials on the site should immediately take remedial actions. First, reset passwords for any accounts accessed through the domain, prioritizing email, financial, and work-related credentials. Enable multi-factor authentication where available to add an additional layer of security. Monitor accounts for unauthorized activity, such as logins from unfamiliar locations or devices, and report suspicious transactions to the relevant service providers. If payment details were submitted, contact financial institutions to block or reverse unauthorized charges. Finally, scan the device used to access the domain for malware, as credential theft sites may deploy additional payloads.