cinemaisplay.space
Appeared in the .space zone on Thursday, October 8, 2026; by the end of that day the census found active website. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
The page is a self-branded Portuguese-language streaming site ("Cine+") that lists catalogs from Netflix, Max, Disney+, Prime Video, Globoplay and others, sells its own subscription renewals, and recruits affiliates via Instagram. That is the shape of a pirate IPTV/streaming front, not a Netflix credential phish. The Netflix mentions are catalog filters, and the self-posting form is the site's own login.
The page impersonates Netflix by displaying a Netflix-branded interface ('Cine+' framing content as Netflix, Max, Disney+, Prime Video, etc.), includes a subscription-renewal dark pattern ('Sua assinatura Cine+ está perto de vencer'), and contains a password form posting to itself with no external links—the sealed-room phishing pattern designed to harvest credentials. The domain name 'cinemaisplay' mimics Netflix's 'play' branding while the page title obscures this deception.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, October 8, 2026
Same data as JSON: /api/zone/domain/cinemaisplay.space. This page is not indexed by search engines and does not link to the site it describes.