capstoneprojectcohort2[.]netlify[.]app

This report details a fraudulent website targeting users with a fake streaming service. The site, whose page title is "Netflix Clone," impersonates the brand Netflix as part of a streaming scam. The primary threat is social engineering, as the site was designed to deceive users into interacting with a fake Netflix login or payment interface, potentially leading to credential theft or financial fraud.

Technical evidence confirms the site’s malicious nature. VirusTotal flagged the domain with 23 detections out of 95 vendors. Google Safe Browsing specifically flagged the site for SOCIAL_ENGINEERING. Blocklists include 1 entry. The domain was registered through Name.com, Inc (associated with Netlify) and created on 2026-02-21. The site resolves to IP address 63.176.8.218, located in Germany (DE), and hosted on AS16509 (Amazon.com, Inc). The SSL certificate was issued by DigiCert Inc, using the DigiCert Global G2 TLS RSA SHA256 2020 CA1.

The site is currently reported as DOWN/OFFLINE. Based on the impersonation of a major brand, confirmed social engineering flag, and high detection rate, the risk level is assessed as high for users who may have previously accessed the site. No active threat is present at this time.