netflilxtvonline[.]com

This domain, netflilxtvonline.com, poses a direct threat as a credential harvesting phishing site impersonating Facebook. Analysis indicates the page title displays 'Netflix,' a deliberate tactic to mislead users into believing they are interacting with a legitimate streaming service while covertly collecting Facebook login credentials. The mismatch between the domain's branding and its declared page title suggests an attempt to exploit user trust in both Netflix and Facebook, increasing the likelihood of successful credential theft. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on October 09, 2025, through Dynadot LLC and resolves to IP address 195.66.215.236, hosted on Autonomous System 30860 (Virtual Systems LLC) in Ukraine. It appears on two security blocklists and is flagged by 21 out of 95 security vendors on VirusTotal. The absence of an SSL certificate further reduces user protection, as data transmitted to this domain is unencrypted and vulnerable to interception. Users who visited netflilxtvonline.com should take immediate action to mitigate potential compromise. All credentials entered on this domain should be considered exposed and must be changed from a secure device. Enable multi-factor authentication on all accounts, particularly Facebook, to prevent unauthorized access. Monitor financial and social media accounts for suspicious activity, and scan the device used to access the domain for malware. If credentials were reused across other platforms, update those passwords as well to prevent lateral compromise.