glistening-bonbon-2acaf3[.]netlify[.]app

This domain, glistening-bonbon-2acaf3.netlify.app, poses a specific threat of brand impersonation, targeting Netflix. The page, titled 'Netflix Clone,' is designed to deceive users into believing they are interacting with a legitimate Netflix service, potentially leading to the theft of personal information, credentials, and financial data.

Analysis indicates that the domain has been flagged by 21 out of 95 security vendors on VirusTotal, suggesting a high level of suspicion. The domain was registered through Name.com, Inc (Netlify) on February 21, 2026, and is hosted in Germany under the IP address 63.176.8.218, which is associated with AS16509 Amazon.com, Inc. The SSL certificate is issued by DigiCert Inc, further attempting to lend credibility to the impersonation. The domain appears on one known security blocklist and has been flagged by Google Safe Browsing for phishing activities. It is currently listed as being taken offline by PhishDestroy.

If users have visited this domain, they should immediately change their Netflix account passwords and any other credentials that may have been compromised. Users should also monitor their financial statements for any unauthorized transactions and report any suspicious activity to their financial institutions. It is recommended to avoid clicking on links or entering personal information on any unfamiliar or suspicious websites, and to verify the authenticity of a site before providing any sensitive data.