fuzzy-netflix-clone[.]firebaseapp[.]com

fuzzy-netflix-clone.firebaseapp.com is actively impersonating Netflix, with 23 out of 95 vendors on VirusTotal marking it as malicious. This domain is hosted by Google LLC in the United States and uses an SSL certificate issued by Google Trust Services. The domain first appeared on PhishDestroy's radar on May 7, 2026, and is currently listed on one public blocklist.

The site is part of a broader phishing campaign designed to exploit Netflix's brand identity, aiming to deceive users into divulging sensitive information. By mimicking Netflix's familiar interface, it seeks to trick individuals into entering login credentials or payment information. The domain's high platform risk score of 93 out of 100 underscores the severity of the threat it poses.

Despite being flagged by multiple security vendors, the domain remains active, leveraging Google's infrastructure to appear legitimate. This tactic increases the likelihood of success as users may trust the domain due to its association with a reputable company. The combination of a high-risk score and significant vendor detection highlights the need for awareness and caution when encountering such deceptive domains.