netflixpremium[.]info

The domain netflixpremium.info has been identified as a brand impersonation threat, specifically targeting Google, despite its page title displaying 'Netflix'. This domain is currently offline, but its recent activity poses significant risks. The domain was created on November 19, 2025, and registered through GoDaddy.com, LLC, with an SSL certificate issued by GoDaddy Secure Certificate Authority. It resolves to the IP address 76.223.105.230 and appears on two security blocklists, with 17 out of 95 VirusTotal security vendors flagging it as malicious. Additionally, AlienVault OTX shows it was found in 15 threat intelligence pulses, indicating widespread recognition of its malicious nature.

The domain netflixpremium.info is a classic example of brand impersonation, where attackers use a misleading domain name and page title to trick users into believing they are visiting a legitimate Netflix or Google service. The fact that it impersonates Google while showing a Netflix page title suggests a sophisticated attempt to harvest credentials or personal information. With elevated risk level and multiple security vendor flags, this domain should be considered dangerous. Users who have interacted with this site may be at risk of credential theft or malware installation.

Currently, the domain is offline, which is a positive development, but users should remain vigilant. PhishDestroy recommends that users avoid visiting any domains with similar naming patterns and ensure their browsers and security software are up to date. If any credentials were entered on this site, users should change them immediately and monitor accounts for suspicious activity. Organizations should block this domain and its associated IP address at network level to prevent future access.