public company · US

Netflix

NETFLIX INC

Streaming media.

Primary official domain
netflix.com
Reviewed official domains
1 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
32
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
1
domains first source-reported within 30 days
First observed, 30 days
45
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF Could not fully evaluate (sender-specific macros) · Mail: Receives mail (5 MX hosts) · checked 2026-10-19 · published policy

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
netflix
Label aliases
Netflix
Official domains
netflix.com (all)
Generated spellings
102 tracked · 77 observed somewhere · 25 not observed (all)

Certificate domains matching this brand

Names identified in certificate logs that match this company or brand. A brand match does not indicate bad intent or malicious activity.

Matching domain groups, 30 days
66
distinct registrable domains with a matching certificate name, by latest CT log time; not attacks
Reviewed official
1
groups on this organization's reviewed official domains, 30 days
Not assessed
65
groups with the brand in the name and no review; no judgement implied
Latest CT observation
2026-10-19 07:19 UTC
log timestamp, not issuance or collection time
Matching domain / nameMatched brand / domainMatch typeFirst CT observationLatest CT observationDistinct certificatesRelationshipSource-reported abuseDetails
netflix-casino-analysis-desk.ph1 name
netflixBrand token in name2026-10-19 07:19 UTC2026-10-19 07:19 UTC2Not assessedNo report in sample coverage
www.netflix-casino-analysis-desk.ph
netflixBrand token in name2026-10-19 07:19 UTC2026-10-19 07:19 UTC2Issuer YE1
netflix-customer-assistance-five.ph1 name
netflixBrand token in name2026-10-19 07:17 UTC2026-10-19 07:17 UTC1Not assessedNo report in sample coverage
netflix-customer-assistance-five.ph
netflixBrand token in name2026-10-19 07:17 UTC2026-10-19 07:17 UTC1Issuer YE1
nontonnetflix1987.chatgpt.site1 name · wildcard names only
netflixBrand token in name2026-10-19 07:15 UTC2026-10-19 07:15 UTC1Not assessedNo report in sample coverage
*.nontonnetflix1987.chatgpt.siteWildcard certificate name: a pattern, not an observed live host
netflixBrand token in name2026-10-19 07:15 UTC2026-10-19 07:15 UTC1Issuer WE1
netflix-service-activation.ph1 name
netflixBrand token in name2026-10-19 07:15 UTC2026-10-19 07:15 UTC1Not assessedNo report in sample coverage
netflix-service-activation.ph
netflixBrand token in name2026-10-19 07:15 UTC2026-10-19 07:15 UTC1Issuer YE2
netflix.net26 names
netflix.netBrand token in nameGenerated spelling2026-10-19 02:32 UTC2026-10-19 07:12 UTC25Not assessedNo report in sample coverage
nflxaccess--zxijt-canry-chap-baseline.prod.netflix.net
netflix.netGenerated spelling2026-10-19 07:12 UTC2026-10-19 07:12 UTC1Issuer YE1
nflxaccess--zxijt-canry-chap-baseline.us-east-1.prod.netflix.net
netflix.netGenerated spelling2026-10-19 07:12 UTC2026-10-19 07:12 UTC1Issuer YE1
bwy-05-a-23-core.corp-qsc.prod.netflix.net
netflix.netGenerated spelling2026-10-19 07:05 UTC2026-10-19 07:05 UTC1Issuer WR1
bwy-03019-dsp.corp-qsc.prod.netflix.net
netflix.netGenerated spelling2026-10-19 07:05 UTC2026-10-19 07:05 UTC1Issuer WR1
bwy-03006-dsp.corp-qsc.prod.netflix.net
netflix.netGenerated spelling2026-10-19 07:05 UTC2026-10-19 07:05 UTC1Issuer WR1
21 more names in this group (most recent shown)
netflixnetlix844.workers.dev1 name · includes wildcard names
netflixBrand token in name2026-10-19 07:12 UTC2026-10-19 07:12 UTC1Not assessedNo report in sample coverage
netflixnetlix844.workers.dev
netflixBrand token in name2026-10-19 07:12 UTC2026-10-19 07:12 UTC1Issuer YE1
*.netflixnetlix844.workers.devWildcard certificate name: a pattern, not an observed live host
netflixBrand token in name2026-10-19 07:12 UTC2026-10-19 07:12 UTC1Issuer YE1
anetflix14.workers.dev2 names · includes wildcard names
netflixBrand token in name2026-10-19 07:10 UTC2026-10-19 07:10 UTC1Not assessedNo report in sample coverage
anetflix14.workers.dev
netflixBrand token in name2026-10-19 07:10 UTC2026-10-19 07:10 UTC1Issuer WE1
*.soft-wildflower-cb6e.anetflix14.workers.devWildcard certificate name: a pattern, not an observed live host
netflixBrand token in name2026-10-19 07:10 UTC2026-10-19 07:10 UTC1Issuer WE1
netflixxxcasino.com1 name · includes wildcard names
netflixBrand token in name2026-10-19 07:10 UTC2026-10-19 07:10 UTC2Not assessedNo report in sample coverage
netflixxxcasino.com
netflixBrand token in name2026-10-19 07:10 UTC2026-10-19 07:10 UTC2Issuer YE1
*.netflixxxcasino.comWildcard certificate name: a pattern, not an observed live host
netflixBrand token in name2026-10-19 07:10 UTC2026-10-19 07:10 UTC2Issuer YE1
netflix-down-load.workers.dev1 name · includes wildcard names
netflixBrand token in name2026-10-19 06:57 UTC2026-10-19 07:10 UTC2Not assessedNo report in sample coverage
netflix-down-load.workers.dev
netflixBrand token in name2026-10-19 06:57 UTC2026-10-19 07:10 UTC2Issuer WE1
*.netflix-down-load.workers.devWildcard certificate name: a pattern, not an observed live host
netflixBrand token in name2026-10-19 06:57 UTC2026-10-19 07:10 UTC2Issuer WE1
netflixgiftsemea.com1 name
netflixBrand token in name2026-10-19 07:06 UTC2026-10-19 07:07 UTC2Not assessedNo report in sample coverage
netflixgiftsemea.com
netflixBrand token in name2026-10-19 07:06 UTC2026-10-19 07:07 UTC2Issuer YR1
netflix-client-web-trends-ph.ph1 name
netflixBrand token in name2026-10-19 07:05 UTC2026-10-19 07:05 UTC2Not assessedNo report in sample coverage
www.netflix-client-web-trends-ph.ph
netflixBrand token in name2026-10-19 07:05 UTC2026-10-19 07:05 UTC2Issuer YE2
belgenetflix.ph2 names
netflixBrand token in name2026-10-19 07:03 UTC2026-10-19 07:04 UTC4Not assessedNo report in sample coverage
dashboard.belgenetflix.ph
netflixBrand token in name2026-10-19 07:04 UTC2026-10-19 07:04 UTC2Issuer YE1
account.belgenetflix.ph
netflixBrand token in name2026-10-19 07:03 UTC2026-10-19 07:03 UTC2Issuer YE2
activation-netflix-verify-pt.ph1 name
netflixBrand token in name2026-10-19 07:02 UTC2026-10-19 07:02 UTC2Not assessedNo report in sample coverage
activation-netflix-verify-pt.ph
netflixBrand token in name2026-10-19 07:02 UTC2026-10-19 07:02 UTC2Issuer YE1
netflixdxb.com1 name
netflixBrand token in name2026-10-19 06:59 UTC2026-10-19 06:59 UTC1Not assessedNo report in sample coverage
kayakfare.netflixdxb.com
netflixBrand token in name2026-10-19 06:59 UTC2026-10-19 06:59 UTC1Issuer YE2
user-netflix-membership.ph1 name
netflixBrand token in name2026-10-19 06:57 UTC2026-10-19 06:57 UTC2Not assessedNo report in sample coverage
user-netflix-membership.ph
netflixBrand token in name2026-10-19 06:57 UTC2026-10-19 06:57 UTC2Issuer YE1
netflix-client-web-patch-ph.ph1 name
netflixBrand token in name2026-10-19 06:56 UTC2026-10-19 06:56 UTC2Not assessedNo report in sample coverage
www.netflix-client-web-patch-ph.ph
netflixBrand token in name2026-10-19 06:56 UTC2026-10-19 06:56 UTC2Issuer YE2
netflix-customer-activation-32.ph1 name
netflixBrand token in name2026-10-19 06:56 UTC2026-10-19 06:56 UTC2Not assessedNo report in sample coverage
www.netflix-customer-activation-32.ph
netflixBrand token in name2026-10-19 06:56 UTC2026-10-19 06:56 UTC2Issuer YE2
mjsg.web.id1 name
netflixBrand token in name2026-10-19 06:55 UTC2026-10-19 06:55 UTC1Not assessedNo report in sample coverage
cache.netflix.com.lsb2.mjsg.web.id
netflixBrand token in name2026-10-19 06:55 UTC2026-10-19 06:55 UTC1Issuer WE1
netflix-5pc.pages.dev1 name · includes wildcard names
netflixBrand token in name2026-10-19 06:55 UTC2026-10-19 06:55 UTC1Not assessedNo report in sample coverage
netflix-5pc.pages.dev
netflixBrand token in name2026-10-19 06:55 UTC2026-10-19 06:55 UTC1Issuer Sectigo Public Server Authentication CA DV E36
*.netflix-5pc.pages.devWildcard certificate name: a pattern, not an observed live host
netflixBrand token in name2026-10-19 06:55 UTC2026-10-19 06:55 UTC1Issuer Sectigo Public Server Authentication CA DV E36
netflix-b6e.pages.dev1 name · includes wildcard names
netflixBrand token in name2026-10-19 06:54 UTC2026-10-19 06:54 UTC1Not assessedNo report in sample coverage
netflix-b6e.pages.dev
netflixBrand token in name2026-10-19 06:54 UTC2026-10-19 06:54 UTC1Issuer WE1
*.netflix-b6e.pages.devWildcard certificate name: a pattern, not an observed live host
netflixBrand token in name2026-10-19 06:54 UTC2026-10-19 06:54 UTC1Issuer WE1
netflixwear.ph1 name
netflixBrand token in name2026-10-19 06:53 UTC2026-10-19 06:53 UTC1Not assessedNo report in sample coverage
netflixwear.ph
netflixBrand token in name2026-10-19 06:53 UTC2026-10-19 06:53 UTC1Issuer YE2
nikhiltelase.workers.dev1 name · wildcard names only
netflixBrand token in name2026-10-19 06:23 UTC2026-10-19 06:52 UTC3Not assessedNo report in sample coverage
*.netflix.nikhiltelase.workers.devWildcard certificate name: a pattern, not an observed live host
netflixBrand token in name2026-10-19 06:23 UTC2026-10-19 06:52 UTC3Issuer WR1
mhjoybots.workers.dev1 name · wildcard names only
netflixBrand token in name2026-10-19 06:52 UTC2026-10-19 06:52 UTC1Not assessedNo report in sample coverage
*.netflixbd.mhjoybots.workers.devWildcard certificate name: a pattern, not an observed live host
netflixBrand token in name2026-10-19 06:52 UTC2026-10-19 06:52 UTC1Issuer WR1
netflix-casino-purchasing-desk.ph1 name
netflixBrand token in name2026-10-19 06:50 UTC2026-10-19 06:50 UTC2Not assessedNo report in sample coverage
netflix-casino-purchasing-desk.ph
netflixBrand token in name2026-10-19 06:50 UTC2026-10-19 06:50 UTC2Issuer YE2
netflix12.ph1 name
netflixBrand token in name2026-10-19 06:41 UTC2026-10-19 06:41 UTC2Not assessedNo report in sample coverage
www.netflix12.ph
netflixBrand token in name2026-10-19 06:41 UTC2026-10-19 06:41 UTC2Issuer YE2

Collected from public certificate-transparency logs since 2026-10-18; 30,973,086 log entries checked so far. 80 logs are read continuously by our CT resolver from the point it started following them; earlier entries are not covered. Names on an organization's official domains are recorded by the resolver for at most 100 names per registrable domain per day, so official-domain name and certificate counts are lower bounds. Times are CT log timestamps, which differ from certificate validity dates. Certificate counts include precertificates and final certificates as separate artifacts. The "Source-reported abuse" badge appears only when an independent source reported that exact name for this organization; a certificate name match never creates it, and "No report in sample coverage" is not a safety verdict. How CT works