netflix[.]bikramgyawali[.]com[.]np

This domain is suspected of impersonating Netflix, a legitimate streaming service, based on the domain name "netflix.bikramgyawali.com.np" and its high-risk profile. The threat posed is a phishing or credential harvesting attack, where visitors may be tricked into entering login credentials, payment details, or personal information under the guise of a Netflix-branded interface.

Technical analysis shows the domain is active, with 20 out of 95 VirusTotal vendors flagging it as malicious, including alphaMountain.ai, BitDefender, Chong Lua Dao, Cluster25, and CRDF. It is hosted on IP address 104.21.81.233, located in the United States, under AS13335 Cloudflare, Inc. The registrar is listed as REGISTRAR_NOT_FOUND, and nameservers are NS_NOT_FOUND. The site uses a Let's Encrypt SSL certificate identified as E7. The GridinSoft trust score is 0 out of 100, and the DOM risk score is 73, indicating high suspicion.

The domain is currently active and poses a significant risk. With 20 vendor detections, a trust score of zero, and a risk score of 73, it is highly likely to be a malicious phishing site targeting Netflix users. Immediate blocking and user warnings are advised.