doanh-netflix[.]duckdns[.]org

This domain impersonates a major streaming service to harvest login credentials. Analysis indicates the site is actively distributing fraudulent login pages designed to capture user credentials under the guise of legitimate service authentication.

Analysis reveals this domain resolves to IP address 13.210.148.182 and is hosted on a dynamic DNS service operated by DuckDNS. VirusTotal scanning shows 10 security vendors have flagged this domain out of 95 total vendors surveyed, indicating widespread detection of malicious intent. The infrastructure analysis confirms the domain remains active as of current assessment, with no evidence of takedown actions.

If you visited this domain, immediately change your account password using a different device or network. Review recent account activity for unauthorized logins or transactions. Enable multi-factor authentication if available. Report the incident to the legitimate service provider and scan your device for malware using a trusted security tool. Disconnect from the network if you entered credentials and monitor for unusual account behavior.