netflixgpt-98554[.]web[.]app

The domain netflixgpt-98554.web.app is actively serving content (HTTP 200) and presents the page title "NetflixGPT - Your Netflix Assistant," directly referencing the Netflix brand. Infrastructure analysis shows the domain was registered on October 16, 2023 via Google Firebase and resolves to IP address 199.36.158.100, which is owned by Fastly, Inc. (AS54113) and located in the United States. The site uses a Google Trust Services / WR4 SSL certificate, enforces HSTS, and leverages Firebase, Google Analytics, and HTTP/3. VirusTotal records indicate that 16 of 95 security vendors have flagged the domain, and it appears on two public blocklists, specifically PhishDestroy and PhishingDB. The Gridinsoft trust score is 0 out of 100, reinforcing the malicious assessment. While the page title and brand target confirm a brand‑impersonation intent, no additional content details, such as login forms or credential‑capture mechanisms, have been disclosed, leaving the exact payload unknown. Defenders should add the domain to DNS and URL filtering blocks, monitor for any related sub‑domains or similar Firebase‑hosted assets, and consider sharing the indicator with threat‑intel feeds to improve collective detection. Continuous observation is advised to capture any future changes in the site’s behavior or content.