Hello Netlify Security Team, @laura
I am writing to report a malicious phishing website hosted on your platform that is actively impersonating a major Indian financial institution, IDFC First Bank, to steal customer credit card credentials.
Malicious URL: https://idfccardworldss.netlify.app/
The site uses deceptive terms like “IDFC First Bank - Close Account” and “Card Protection” to trick victims into entering sensitive credit card numbers, CVVs, and banking passwords. Additionally, it has been distributed alongside an obfuscated malicious Android APK that communicates with a malicious backend.
Please terminate this subdomain immediately to protect users from financial fraud.
Thank you.