ver1ficar369[.]netlify[.]app

The domain ver1ficar369.netlify.app is flagged as a generic phishing domain. It is suspected to impersonate a legitimate login page, likely targeting users by mimicking a trusted brand or service. The domain does not appear to be associated with a specific brand or drainer kit, but the use of a common hosting platform and a generic page title 'Correo' suggest an attempt to deceive users into providing sensitive information such as login credentials.

Technical indicators reveal that the domain has been flagged by 8 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. The domain is registered through Netlify and resolves to the IP address 35.157.26.135, which is located in Germany and associated with AS16509 Amazon.com, Inc. The SSL certificate is issued by DigiCert Inc, specifically the DigiCert Global G2 TLS RSA SHA256 2020 CA1. The domain appears on one security blocklist and is flagged as a phishing site by Google Safe Browsing. The exact creation date is not provided, but the domain is currently active and accessible.

The domain remains active and poses a high risk to users who may be tricked into visiting the site. Immediate response actions include blocking the domain at the network level and educating users about the risks of phishing. Despite the current blocklist and detection, there is a remaining risk as not all security vendors have flagged the domain, and users may still fall victim to the deception. It is recommended to monitor the domain for any changes and to report it to additional security services for broader protection.