# nepalnetflix.com — SUSPICIOUS

> nepalnetflix.com is a fake Netflix site stealing logins. Created May 22, 2025, via OwnRegistrar, it’s not yet blocked (0/95 VirusTotal detections).

## Summary
PhishDestroy identifies nepalnetflix.com as an active Netflix impersonation site designed to steal user login credentials through a convincing but fraudulent copy of the real streaming platform. The domain uses a visual and textual design nearly identical to Netflix to trick visitors into entering their email and password, which are then harvested by attackers for account takeover, payment fraud, or sold on dark web markets. This is a classic credential phishing operation targeting global streaming users with regional branding to appear legitimate.

This domain was flagged for investigation based on multiple red flags: it currently shows 0 detections out of 95 security engines on VirusTotal, was registered through OwnRegistrar, Inc. on May 22, 2025, and resolves to IP address 172.67.161.231. While it uses a Google Trust Services SSL certificate to appear secure, the combination of recent registration, low detection rate, and clear intent to mimic a major brand makes it a high-risk imposter site. Registrations this new with low VT coverage often signal early-stage phishing campaigns.

If you visited nepalnetflix.com or entered any login details, immediately change your Netflix password and enable two-factor authentication. Scan your device with updated antivirus software and review recent transactions for unauthorized charges. Avoid clicking any links from emails or messages claiming to be from Netflix, especially those leading to unusual domains. Report the site to Google Safe Browsing and your local cybercrime unit using the domain and IP address. Always access Netflix directly via the official app or website at netflix.com to ensure safety.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2025-05-22 17:53:53
- Registrar: OwnRegistrar, Inc.
- IP: 172.67.161.231

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/4c053649-d9b6-42d9-b692-c42a8dab5cd9
- PhishDestroy: https://phishdestroy.io/domain/nepalnetflix.com/
- LLM endpoint: https://phishdestroy.io/domain/nepalnetflix.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nepalnetflix.com/
Last updated: 2026-03-24