incomparable-semifreddo-0de7f5[.]netlify[.]app

This domain, incomparable-semifreddo-0de7f5.netlify.app, poses a high-risk brand impersonation threat targeting Netflix users. The phishing page replicates the official Netflix India interface, presenting the identical page title 'Netflix India – Watch TV Shows Online, Watch Movies Online' to deceive victims into submitting credentials or payment details. Analysis indicates the domain was designed to exploit trust in the Netflix brand, likely distributing stolen data to unauthorized third parties for financial fraud or account takeover operations. Infrastructure analysis reveals the domain was registered through Name.com, Inc. on May 09, 2018, and resolves to the IP address 63.176.8.218, hosted on Amazon.com, Inc. infrastructure (AS16509) in Germany. Detection metrics confirm the severity of the threat: 24 out of 95 security vendors on VirusTotal flagged the domain as malicious, while Google Safe Browsing and one additional security blocklist classified it as phishing. The SSL certificate, issued by DigiCert Inc, does not mitigate the risk, as phishing sites frequently use valid certificates to appear legitimate. Users who visited incomparable-semifreddo-0de7f5.netlify.app should immediately revoke any entered credentials by changing their Netflix password and enabling multi-factor authentication. All devices used to access the domain should undergo a full malware scan to detect potential secondary infections. Financial institutions should be notified if payment details were submitted, and transaction histories should be monitored for unauthorized activity. Organizations are advised to update endpoint protection rules to block the domain and its associated IP address (63.176.8.218) to prevent further exposure.