netlfliix[.]netlify[.]app
“Netflix India - Watch Shows Online”
Résumé des preuves
This domain, netlfliix.netlify.app, is confirmed as a brand impersonation site targeting Netflix users. Analysis indicates the site mimics Netflix India’s official interface, presenting a login page titled 'Netflix India - Watch Shows Online' to deceive victims into submitting credentials. No crypto drainer or payment skimming components were detected, suggesting the primary objective is credential harvesting for account takeover or resale on underground markets. The impersonation extends to visual design, language, and regional targeting, increasing the likelihood of victim engagement. Technical indicators confirm elevated risk. The domain was registered through Name.com, Inc. (via Netlify) on February 21, 2026, and resolves to IP address 35.157.26.135, hosted on Amazon.com, Inc. infrastructure (AS16509) in Germany. VirusTotal detection shows 20 out of 95 security vendors flagging the domain as malicious. The SSL certificate, issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1), provides HTTPS encryption but does not validate legitimacy. The domain appears on one security blocklist, and no Google Safe Browsing (GSB) entries were recorded prior to takedown. As of the latest verification, netlfliix.netlify.app has been taken offline, likely following abuse reports or automated detection. However, residual risk remains due to potential credential exposure from prior interactions. Users who entered login details on this site should immediately reset passwords for Netflix and any reused credentials across other platforms. Organizations are advised to monitor for credential stuffing attempts using harvested data. The hosting provider and registrar have been notified, but threat actors may re-deploy similar infrastructure under new domains. Continuous monitoring of subdomain registrations on Netlify and other platform-as-a-service providers is recommended to detect future impersonation attempts.
Data Coverage
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 12/08/2026
10 sources externes surveillées Aucune correspondance
Chronologie de détection
-
État du domaine
Accessible → Inaccessible
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of netlfliix.netlify.app · checked Mar 1, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif