policguardversex-policcodexer-fds1610[.]netlify[.]app

The domain policguardversex-policcodexer-fds1610.netlify.app has been identified as a generic_phishing site. This domain does not appear to be associated with a specific brand or entity, and there is no evidence of a drainer kit being used. The primary threat is the potential to steal credentials or personal information from unsuspecting users.

Analysis indicates that the domain is registered through Netlify and resolves to the IP address 63.176.8.218. The SSL certificate is issued by DigiCert Inc, specifically the DigiCert Global G2 TLS RSA SHA256 2020 CA1. On VirusTotal, 12 out of 95 security vendors have flagged this domain as malicious. The domain appears on 2 security blocklists, and its current status on Google Safe Browsing is not listed, indicating it may not have been evaluated or is no longer active.

The domain policguardversex-policcodexer-fds1610.netlify.app is currently offline, which may indicate that it has been taken down by the hosting provider or the threat actors. Despite the domain being offline, the infrastructure used to host the phishing site remains a concern. Users should avoid any links or references to this domain, and organizations should update their threat intelligence databases to ensure that any residual risk is mitigated. The elevated risk level suggests that additional monitoring and security measures should be implemented to prevent potential future attacks.