verificar-netflix-suscription[.]com

This domain, verificar-netflix-suscription.com, is flagged as an active brand impersonation threat targeting Netflix users. Analysis indicates the site is designed to harvest login credentials by mimicking the official Netflix interface, as evidenced by its page title and SSL certificate issued by Let's Encrypt. The domain operates under the guise of subscription verification, a common tactic to induce urgency and trick victims into disclosing sensitive information. Infrastructure analysis reveals concrete technical indicators of compromise. The domain resolves to IP address 45.74.61.11 and has been flagged by 13 out of 95 security vendors on VirusTotal. Registered through Hosting Concepts B.V. d/b/a Registrar.eu, the domain was created on June 14, 2026, an anomalous future date suggesting potential registration data manipulation. The site remains unlisted on Google Safe Browsing (GSB) but is actively monitored by blocklists due to its malicious infrastructure. As of the latest assessment, verificar-netflix-suscription.com remains active, posing a continued risk to unsuspecting users. Immediate response actions include reporting the domain to security vendors for broader detection and urging hosting providers to suspend the associated IP. Despite these measures, the domain's persistence and the use of a valid SSL certificate heighten the remaining risk. Users are advised to verify domain authenticity before entering credentials and to monitor for unauthorized account activity.