novichok-zetflix.online
Appeared in the .online zone on Thursday, September 3, 2026; by the end of that day the census found boilerplate page. Full domain report
Signals, not verdicts. A domain appears here because heuristics matched its name, its infrastructure or the page it served on its first day. Where a model has looked at it, that is shown as an opinion with a confidence, not as a finding. Nothing on this page says a site is malicious. Read the evidence and decide for yourself.
Own one of these names and think the listing is wrong? Tell us and a person will look.
What matched
Model opinions
Site currently serves only Beget's default 'domain not linked to a directory' placeholder (the 'form' is Beget's own honeypot-protected contact form, not a credential capture), so no live deception; however the name pairs 'zetflix' — a well-known Russian pirate streaming brand often flagged as a Netflix-like knockoff — with a mirror-style prefix, matching the pattern of disposable piracy-mirror domains on this retail Russian host. No impersonation of Netflix's own account portal is present.
The page is a Beget hosting-provider placeholder showing 'domain not linked to any directory on the server' — a standard empty-domain page. The domain name contains a Netflix typo and 'novichok' (a nerve agent), but the page itself displays only the registrar's instructional content with no phishing form, login attempt, or deceptive impersonation. The scorer flagged a form, but the actual rendered page shown is the Beget default placeholder with no functional phishing infrastructure visible.
A model looked at the screenshot and page text and wrote what it thought. It can be wrong, and it is not a finding.
What the page looked like on Thursday, September 3, 2026
Same data as JSON: /api/zone/domain/novichok-zetflix.online. This page is not indexed by search engines and does not link to the site it describes.