p7-netflic-clone[.]netlify[.]app

This domain, p7-netflic-clone.netlify.app, is flagged as a brand impersonation threat specifically targeting Netflix. Analysis indicates the domain is currently offline, though it previously hosted a fraudulent page mimicking the official Netflix platform. The threat type is confirmed as brand impersonation, designed to deceive users into disclosing sensitive credentials or payment information under the guise of a legitimate streaming service. Infrastructure analysis reveals the domain was registered through Name.com, Inc. (Netlify) and resolves to the IP address 63.176.8.218, located in Germany under AS16509 (Amazon.com, Inc.). The domain was created on February 21, 2026, though this date may reflect spoofed registration metadata. Security vendors on VirusTotal flagged the domain at a rate of 21 out of 95, indicating moderate detection but sufficient concern for blocking. The SSL certificate is issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1), a legitimate provider, which does not mitigate the malicious intent. The domain appears on one security blocklist, and the page title explicitly impersonates Netflix Pakistan, a regional variant of the brand. Current status confirms the domain has been taken offline, reducing immediate risk to end users. However, organizations and individuals are advised to proactively block the domain and its associated IP (63.176.8.218) at the network level to prevent potential re-emergence. Security teams should monitor for similar impersonation domains using the same registrar or hosting infrastructure. End users should verify the authenticity of any Netflix-related communications by accessing the service directly through official channels, avoiding links from unsolicited messages or third-party sources.