public company · US
Netflix
NETFLIX INC
Streaming media.
- Primary official domain
- netflix.com
- Reviewed official domains
- 1 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
Matching domains, 30 days
32
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
1
domains first source-reported within 30 days
First observed, 30 days
45
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF Could not fully evaluate (sender-specific macros) · Mail: Receives mail (5 MX hosts) · checked 2026-10-19 · published policy
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
- Brand tokens
- netflix
- Label aliases
- Netflix
- Official domains
- netflix.com (all)
- Generated spellings
- 102 tracked · 77 observed somewhere · 25 not observed (all)
- Can receive mail
- 22 spellings and 9 reported domains publish MX records · mail at Above.com parking (parking placeholder) 7 · hostedmxserver.com 5 · h-email.net (parking placeholder) 3 · 14 more (77 spellings and 32 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)
Matching domains with source reports or listings
Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.
| Domain / hostname | Source claim | Company match (DomainSpoof) | Date (mixed basis) | Latest DNS | Sources / records | Finding details |
|---|---|---|---|---|---|---|
netflix-uat[.]dblxhosting[.]co[.]ukMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive44.194.63.24Amazon Web ServicesAmazon Web Services (AS14618) · USec2-44-194-63-24.compute-1.amazonaws.com54.209.121.96Amazon Web ServicesAmazon Web Services (AS14618) · USec2-54-209-121-96.compute-1.amazonaws.com54.86.195.1Amazon Web ServicesAmazon Web Services (AS14618) · USec2-54-86-195-1.compute-1.amazonaws.comchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
esnetflix-infos[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
netflixlanding[.]iamhimanshu[.]inMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive216.198.79.65Amazon Web ServicesAmazon Web Services (AS16509) · US64.29.17.65Amazon Web ServicesAmazon Web Services (AS16509) · USchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
jobsatnetflix[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive91.195.240.94Parking page · SedoSedo (AS47846) · DEchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
leadershiptalentnetflix[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
netflix-casino-es[.]esMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive158.94.209.28 · Confirmed phishing host address (DomainSpoof, 48 hours), Emerging Threats open block list, Spamhaus DROP (credit: The Spamhaus Project)OMEGATECH-AS (AS202412) · SCchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
crm[.]netflix-france-abonnement[.]com4 hostnames under netflix-france-abonnement.comMail: MXSPF · checked 2026-10-19mail at hostedmxserver.com (web / mail hosting) | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive172.236.108.16Parking page · ParkLogicParkLogic (AS63949) · SG172-236-108-16.ip.linodeusercontent.com172.239.193.153Parking page · ParkLogicParkLogic (AS63949) · SG172-239-193-153.ip.linodeusercontent.com172.239.194.103Parking page · ParkLogicParkLogic (AS63949) · SG172-239-194-103.ip.linodeusercontent.comchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
dash[.]netflix-france-abonnement[.]com | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive172.236.108.16Parking page · ParkLogicParkLogic (AS63949) · SG172-236-108-16.ip.linodeusercontent.com172.239.193.153Parking page · ParkLogicParkLogic (AS63949) · SG172-239-193-153.ip.linodeusercontent.com172.239.194.103Parking page · ParkLogicParkLogic (AS63949) · SG172-239-194-103.ip.linodeusercontent.comchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
member[.]netflix-france-abonnement[.]com | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive172.236.108.16Parking page · ParkLogicParkLogic (AS63949) · SG172-236-108-16.ip.linodeusercontent.com172.239.193.153Parking page · ParkLogicParkLogic (AS63949) · SG172-239-193-153.ip.linodeusercontent.com172.239.194.103Parking page · ParkLogicParkLogic (AS63949) · SG172-239-194-103.ip.linodeusercontent.comchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
staging[.]netflix-france-abonnement[.]com | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive172.236.108.16Parking page · ParkLogicParkLogic (AS63949) · SG172-236-108-16.ip.linodeusercontent.com172.239.193.153Parking page · ParkLogicParkLogic (AS63949) · SG172-239-193-153.ip.linodeusercontent.com172.239.194.103Parking page · ParkLogicParkLogic (AS63949) · SG172-239-194-103.ip.linodeusercontent.comchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
netflix-latam-oferta[.]comMail: MX · Confirmed phishing host address (DomainSpoof, 48 hours) · checked 2026-10-19mail at netflix-latam-oferta.com | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive162.240.81.81 · Confirmed phishing host address (DomainSpoof, 48 hours)Unified Layer (Bluehost, HostGator)Unified Layer (Bluehost, HostGator) (AS46606) · US162-240-81-81.unifiedlayer.comchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
netflix-online[.]itMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive185.53.179.136Parking page · ParkingCrew (Team Internet)ParkingCrew (Team Internet) (AS206834) · DEchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
netflix-registro[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
netflix-renouveler-mon-abonnement[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive185.53.179.136Parking page · ParkingCrew (Team Internet)ParkingCrew (Team Internet) (AS206834) · DEchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
netflix-scheduler[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive165.245.152.188 · Confirmed phishing host address (DomainSpoof, 48 hours)DigitalOceanDigitalOcean (AS14061) · USchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
islington-cc[.]netflix-subscription-uae[.]com3 hostnames under netflix-subscription-uae.comMail: MXSPF · checked 2026-10-19mail at hostedmxserver.com (web / mail hosting) | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive172.236.108.16Parking page · ParkLogicParkLogic (AS63949) · SG172-236-108-16.ip.linodeusercontent.com172.239.193.153Parking page · ParkLogicParkLogic (AS63949) · SG172-239-193-153.ip.linodeusercontent.com172.239.194.103Parking page · ParkLogicParkLogic (AS63949) · SG172-239-194-103.ip.linodeusercontent.comchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
u-bbw6dofmk1[.]wc[.]netflix-subscription-uae[.]com | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive172.236.108.16Parking page · ParkLogicParkLogic (AS63949) · SG172-236-108-16.ip.linodeusercontent.com172.239.193.153Parking page · ParkLogicParkLogic (AS63949) · SG172-239-193-153.ip.linodeusercontent.com172.239.194.103Parking page · ParkLogicParkLogic (AS63949) · SG172-239-194-103.ip.linodeusercontent.comchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
wc[.]netflix-subscription-uae[.]com | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive172.236.108.16Parking page · ParkLogicParkLogic (AS63949) · SG172-236-108-16.ip.linodeusercontent.com172.239.193.153Parking page · ParkLogicParkLogic (AS63949) · SG172-239-193-153.ip.linodeusercontent.com172.239.194.103Parking page · ParkLogicParkLogic (AS63949) · SG172-239-194-103.ip.linodeusercontent.comchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
netflix[.]surfMail: MXSPF · checked 2026-10-19mail at Namecheap forwarding (mail forwarding) · sends via Namecheap forwarding | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive104.21.51.12CloudflareCloudflare (AS13335) · US172.67.216.98CloudflareCloudflare (AS13335) · US2606:4700:3030::ac43:d862CloudflareCloudflare (AS13335) · US2606:4700:3036::6815:330cCloudflareCloudflare (AS13335) · USchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
netflix2024[.]comMail: DMARC · checked 2026-10-19DMARC policy quarantine | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive13.248.213.45Amazon Web ServicesAmazon Web Services (AS16509) · USa67c48129651a0940.awsglobalaccelerator.com76.223.67.189Amazon Web ServicesAmazon Web Services (AS16509) · USa67c48129651a0940.awsglobalaccelerator.comchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
netflix555-login[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive104.21.38.64CloudflareCloudflare (AS13335) · US172.67.219.182CloudflareCloudflare (AS13335) · US2606:4700:3031::ac43:dbb6CloudflareCloudflare (AS13335) · US2606:4700:3036::6815:2640CloudflareCloudflare (AS13335) · USchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
netflix6[.]comMail: MX · checked 2026-10-19mail at Tencent QQ Mail (consumer mailbox) | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive101.32.126.3 · Confirmed phishing host address (DomainSpoof, 48 hours)Tencent CloudTencent Cloud (AS132203) · CNchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
netflixcasinobelgique[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
netflixcasinonz[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
netflixcasinouk[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
netflixfeitoaqui[.]com[.]brMail: MXDMARC · checked 2026-10-19mail at Amazon SES (sending service) · DMARC policy quarantine | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive216.198.79.1Amazon Web ServicesAmazon Web Services (AS16509) · USchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
netflixl[.]orgMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive104.21.57.5CloudflareCloudflare (AS13335) · US172.67.139.93CloudflareCloudflare (AS13335) · US2606:4700:3034::ac43:8b5dCloudflareCloudflare (AS13335) · US2606:4700:3037::6815:3905CloudflareCloudflare (AS13335) · USchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
www[.]netflixtarot[.]comMail: SPFDMARC · checked 2026-10-19DMARC policy reject | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive107.20.175.192Amazon Web ServicesAmazon Web Services (AS14618) · USec2-107-20-175-192.compute-1.amazonaws.com204.236.236.127Amazon Web ServicesAmazon Web Services (AS14618) · USec2-204-236-236-127.compute-1.amazonaws.com50.17.247.9Amazon Web ServicesAmazon Web Services (AS14618) · USec2-50-17-247-9.compute-1.amazonaws.com2600:1f18:631e:2f80::de70Amazon Web ServicesAmazon Web Services (AS14618) · US2600:1f18:631e:2f81::de70Amazon Web ServicesAmazon Web Services (AS14618) · US2600:1f18:631e:2f82::de70Amazon Web ServicesAmazon Web Services (AS14618) · USchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
netflixtdv[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive104.21.64.185CloudflareCloudflare (AS13335) · US172.67.154.79CloudflareCloudflare (AS13335) · USchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
netflix[.]patelrudra[.]inMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
32 registrable domains · 37 hostnames · page 1 of 2Next →
A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.