cool-lebkuchen-63f104[.]netlify[.]app

The domain cool-lebkuchen-63f104.netlify.app, now offline, impersonated Netflix to conduct streaming scams. It was flagged as malicious by 21 out of 93 vendors on VirusTotal, indicating a significant recognition of its threat level. Additionally, Google Safe Browsing has flagged the domain, further confirming its malicious intent. PhishDestroy's blocklist also includes this domain, reflecting its proactive measures in identifying and mitigating threats.

Registered through Name.com, Inc and hosted on an Amazon.com, Inc IP address in Germany, this domain used a DigiCert SSL certificate to appear legitimate. The site, titled "Netfilx Clone," aimed to deceive users into entering their Netflix credentials or other sensitive information. The abuse score of 23/100 suggests a moderate level of reported abuse activity associated with this domain.

Despite being taken down, the domain's activity highlights the ongoing threat of phishing domains exploiting popular brands like Netflix. The 21 vendor detections demonstrate the domain's malicious nature, while the inclusion in PhishDestroy's blocklist underscores the importance of early detection. This case exemplifies the need for continuous monitoring and rapid response to emerging phishing threats.