courageous-eclair-45cdc4[.]netlify[.]app

PhishDestroy identifies courageous-eclair-45cdc4.netlify.app as an active Netflix-themed phishing domain currently under investigation for credential harvesting attacks. The fraudulent site mimics Netflix’s login interface to trick users into submitting their credentials, posing a direct threat to account security and financial data.

Security analysis reveals this domain has not yet been flagged by any of the 95 VirusTotal vendors, indicating a low detection rate among antivirus engines. Registered through Netlify, the site resolves to IP address 35.157.26.135 and utilizes a DigiCert SSL certificate for deceptive legitimacy. Netlify’s infrastructure is being exploited to host this malicious content, further complicating blocking efforts.

Users are strongly advised to avoid interacting with courageous-eclair-45cdc4.netlify.app and report any encountered instances to Netflix’s fraud reporting channels. Implementing DNS-based blocklists and verifying URL authenticity via official Netflix domains are critical steps to mitigate exposure. Organizations should monitor for outbound connections to the identified IP and update threat intelligence feeds to preemptively block this active phishing campaign.