netflix-clone0lpj[.]rollout[.]site

This domain, netflix-clone0lpj.rollout.site, poses as a Netflix streaming platform to steal user credentials. Visitors are presented with a fake login interface designed to harvest account details, including email addresses and passwords. The site may also attempt to collect payment information under the guise of subscription verification, putting users at risk of financial fraud and identity theft. Analysis indicates the domain was registered on October 24, 2024, through NameCheap, Inc. and resolves to the IP address 37.72.169.170. Security vendors have flagged this domain as malicious, with 18 out of 95 engines on VirusTotal detecting it as a phishing threat. The SSL certificate, issued by SSL2BUY EMEA LLC, does not mitigate the risk, as phishing sites commonly use valid certificates to appear legitimate. Infrastructure analysis reveals the hosting provider is HIVELOCITY, Inc., based in the US. If you visited netflix-clone0lpj.rollout.site or entered any credentials, take immediate action. Reset your Netflix password using a trusted device and enable multi-factor authentication if available. Monitor your account for unauthorized activity, such as unfamiliar streaming sessions or changes to payment methods. Review linked email accounts and financial statements for signs of compromise. Report the incident to your organization’s security team if accessed on a work device, and consider notifying relevant authorities or fraud reporting platforms.