sahilzalte[.]netlify[.]app

This report analyzes the domain sahilzalte.netlify.app, which was identified as a streaming scam impersonating the Netflix brand. The site's page title claimed to offer access to "Netflix India – Watch TV Shows Online, Watch Movies Online," indicating it was designed to deceive users into believing they were accessing legitimate Netflix services. The primary threat posed by this domain is credential harvesting or financial fraud, as visitors may have been prompted to enter login credentials or payment information under the false pretense of subscribing to or accessing Netflix content.

Technical evidence from the available data confirms the malicious nature of this domain. VirusTotal flagged the site with 23 detections out of 95 security vendors, with specific alerts from ADMINUSLabs, Criminal IP, alphaMountain.ai, BitDefender, and CyRadar. The domain was registered through Name.com, Inc (Netlify) on February 21, 2026, and resolved to IP address 63.176.8.218 located in Germany, hosted by AS16509 Amazon.com, Inc. The SSL certificate was issued by DigiCert Inc, using the DigiCert Global G2 TLS RSA SHA256 2020 CA1 chain. The domain's nameservers were dns1.p01.nsone.net, dns2.p01.nsone.net, dns3.p01.nsone.net, and dns4.p01.nsone.net. It appeared on 1 blocklist.

As of the time of analysis, the domain is offline and no longer resolving. The risk level is assessed as high due to the combination of brand impersonation, high detection rate by security vendors, and the potential for user data compromise. Users who may have visited this site before it went offline are advised to change any credentials entered and monitor for unauthorized account activity.