amazing-dusk-c118b7[.]netlify[.]app

Analysis of the domain amazing-dusk-c118b7.netlify.app indicates high-risk brand impersonation activity targeting Microsoft. Registered on May 27, 2026, through Netlify, the domain resolves to IP address 63.176.8.218, hosted on AWS EC2 infrastructure in Germany (eu-central-1). As of July 12, 2026, the domain remains active, returning an HTTP 200 status code. A DigiCert-issued SSL certificate (DigiCert Global G2 TLS RSA SHA256 2020 CA1) is present, which may lend superficial legitimacy to the site. Security vendor detection is notable: 17 of 91 engines on VirusTotal flag the domain as malicious. The domain appears on at least one security blocklist and is explicitly categorized as a brand impersonation scam. Gridinsoft assigns a trust score of 0/100, reinforcing its classification as malicious. While the exact content of the site has not been analyzed, the available indicators—including the brand target designation—strongly suggest an attempt to deceive users into believing the site is affiliated with Microsoft. Defenders should treat this domain as hostile infrastructure. Immediate blocking at the DNS and network perimeter is recommended. Given the domain's recent registration and continued activity, monitoring for related subdomains or newly registered lookalike domains is advised. No legitimate use case for this domain has been identified, and its infrastructure aligns with known phishing patterns.