netflixpaymentportal[.]org

The domain netflixpaymentportal.org is currently active and classified as a high-risk generic phishing domain as of July 20, 2026. Analysis of its infrastructure shows it was registered on July 19, 2026, through Name.com, Inc. The domain is configured with the following nameservers: ns1glr.name.com, ns2kqz.name.com, ns3fgq.name.com, and ns4bht.name.com. DNS resolution points to IP address 34.214.61.222. This domain has been observed on one public security blocklist, specifically listed by PhishDestroy, confirming its use in phishing-related activity.

VirusTotal data indicates that 8 out of 91 security vendors currently identify this domain as malicious. The precise content hosted at this address has not yet been analyzed, so the specific nature or target of the phishing attempt remains unconfirmed. There is no available evidence regarding page titles, SSL certificate details, HTTP status, or any further information about the content, brand impersonation, or scam kit usage.

Defenders should block access to netflixpaymentportal.org at the network perimeter and monitor for any traffic to IP 34.214.61.222 associated with this domain. Continued monitoring for additional blocklist entries and security vendor detections is recommended. Incident response teams should treat this domain as a credible phishing threat due to its rapid detection and multiple vendor flags within a day of registration. The site remains active at the time of reporting, and further analysis should be carried out if additional intelligence or access to page content becomes available.