Skip to security report
Domain security and threat intelligence
netflixloinh.godaddysites.com favicon

netflixloinh.godaddysites.com

“Netflix - Watch TV Shows Online, Watch Movies Online”

Threat verdict Critical 100/100 evidence score
Availability Cloaked · reachable Reachability observed through cloaking checks
VirusTotal detections: 21/91 Brand impersonation: Netflix Last known active
Jun 7, 2026 Netflix
Actions API
⚠️
This domain has been flagged as malicious
Security engines reporting a detection: 21. Exercise extreme caution — do not enter credentials or personal information.

Evidence Summary

CRITICAL
Score
100/100

The domain netflixloinh.godaddysites.com poses a significant phishing threat by impersonating a legitimate streaming service to deceive users. Phishing sites often aim to harvest sensitive information such as usernames, passwords, and payment details, potentially leading to financial loss or identity theft for unsuspecting users who engage with the site.

Analysis of the domain reveals that it has been flagged by 21 out of 95 security vendors on VirusTotal, indicating a substantial consensus regarding its malicious nature. The domain was created on November 18, 2013, and is registered through GoDaddy.com, LLC, a well-known domain registrar. It is currently active and resolves to the IP address 76.223.105.230, which is hosted by Amazon.com, Inc. Additionally, this domain appears on one security blocklist and has been specifically blocked by PhishDestroy, further corroborating its fraudulent activities.

If you have visited this domain, it is crucial to take immediate precautions. Change any passwords that may have been entered while on the site, especially for accounts associated with sensitive information. Monitor your financial accounts for any unauthorized transactions and consider enabling two-factor authentication where available. It is also advisable to run a complete malware scan on your device to ensure that no malicious software has been installed as a result of the visit.

VirusTotal
VirusTotal
21 det.
URLScan
URLScan
TLS Certificate
GoDaddy.com, Inc. / Go Daddy Secure Certificate Authority - G2
Age
12.8 yr
Observed status
Cloaked · reachable 200
PhishDestroy
DestroyList
Listed
Data coverage VirusTotal 21 / 91 OTX no community references CF Radar scan completed URLScan capture stored report URLScan verdict malicious TLS valid certificate, 36d WHOIS 156 mo old Screenshot external capture

Threat Response Pipeline

Discovery
Checks
Reports
Availability
11/13

Public Blocklist Status

Stored detection

Cloaking alert

Cloaking type
status_split
Cloaking score
3/6

Stored Capture · 1 source

Domain Intelligence

Domain
URLScan Verdict Malicious score 100 Phishing brand: Netflix report ↗
Server / ASN DPS/2.0.0+sha-1109afc · AS16509 AMAZON-02 - Amazon.com, Inc., US
IP Reputation abuse score 31/100 18 reports Fraud OrdersDDoS AttackFTP Brute-ForcePhishingOpen ProxyWeb SpamEmail SpamHackingSpoofingExploited Host checked Sep 11, 2026
Registrar (base domain) GoDaddy US(US)
IP Address 76.223.105.230 US
GeoUS Seattle, US
NetworkAS16509 · Amazon.com, Inc.
Registration (base domain)godaddysites.com · Created Nov 18, 2013 Expires Nov 18, 2032
Cloaking Cloaking Detected Status split · score 3/6
alive_content: raw=ok; http=200; via=https_proxy; server=DPS/2.0.0+sha-9ac0622
server: DPS/2.0.0+sha-9ac0622 title: Netflix - Watch TV Shows Online, Watch Movies Online
checked Sep 16, 2026
Elapsed Since First Report 5 days
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Cloaked · reachable.
What each report contains Stored outgoing-report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
HTTP Status200
Technical detailsDNS, SSL SANs, timestamps
First DetectedJun 7, 2026
DOM Analysisanalyzed Jun 11, 2026score 100/100
IoC Extractionscanned Jul 29, 20260 wallet · 0 Telegram IoCs
Submitted URLhttp://netflixloinh.godaddysites.com/
Nameserverscns1.secureserver.netcns2.secureserver.net
TLS Fingerprint
TLS Observationvalid from Apr 8, 2026scanned Jun 11, 2026
TLS SAN Domainsgodaddysites.com
Favicon Hash
Page Title
Netflix - Watch TV Shows Online, Watch Movies Online
TLS Certificate
Valid transport encryption · Issued by GoDaddy.com, Inc. / Go Daddy Secure Certificate Authority - G2 · valid for 36 days
Technologies · 3 identified
Detected via Cloudflare Radar · Wappalyzer engine
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

21 / 91 security vendors flagged this domain
View on VT
Last analyzed Previous stored snapshot: 21 detections
AILabs (MONITORAPP)
alphaMountain.ai
BitDefender
Ermes
ESET
Emsisoft
Forcepoint ThreatSeeker
Fortinet
G-Data
Google Safe Browsing
Gridinsoft
Kaspersky
LevelBlue
Lionic
MalwareURL
Mimecast
Netcraft
Sophos
VIPRE
Webroot
Yandex Safebrowsing

Archived Evidence

Wayback Machine Snapshot
A historical snapshot is available for evidence review
View Archive

Community reports

Reported by 1 community member, first seen Jun 6, 2026

Stored reports
1
Unique reported URLs
1
Accepted1

Evidence & External Reports

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory
Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself

Check Any Domain

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community

Report

Live Threat Feed

Recent phishing reports and observed availability changes

Monitor

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing
HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html
<iframe
  src="https://phishdestroy.io/embed/domain/netflixloinh.godaddysites.com"
  title="PhishDestroy threat report for netflixloinh.godaddysites.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>