Security Review

Is nomorflix.icu legit or a scam?

Our verdict:Suspicious· 43/100

18-day-old free streaming site on .icu domain flagged by security tools and rated 0/100 by independent reviewers, though one wiki lists it positively.

nomorflix.icuScanned 10h ago
0
Trust score
SUSPICIOUS
Heuristics 47·MT 40
Category tags
streamingentertainment#Fake Shop72% MT confidence
Technical red flags (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
3/92
Engines flagged this URL
Domain Age
18 days old
Registered May 30, 2026
MT Intelligence
Suspicious
High likelihood · 72% confidence
SUSPICIOUS

Shop shows non-delivery red flags

Domain was registered only 18 days ago — brand-new sites are higher-risk by default. Several red flags typical of non-delivery shops are present. Don't pay by crypto or wire, and keep the chargeback window in mind.

Website Preview

Screenshot of nomorflix.icu
LIVE RENDER
nomorflix.icu

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
High scam likelihoodengineMT · Guardiantrust40/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The domain was registered approximately 18 days ago on the .icu TLD, which is heavily over-represented in scam operations. Three security engines (alphaMountain.ai, Fortinet, and Gridinsoft) flag it as spam or suspicious. Independent review aggregators assign it a 0/100 trust score, citing the very young domain age, hidden WHOIS owner identity, and lack of established user history as primary concerns. However, the site appears in a community wiki for free streaming services with a positive 17/18 feature rating, suggesting it may be a functional (if legally questionable) streaming aggregator rather than a credential-harvesting or malware-distribution operation. The absence of contact information, business registration, and the privacy-protected WHOIS registration are consistent with both legitimate privacy-conscious operators and scam infrastructure. The valid SSL certificate and clean sandbox results provide minor reassurance, but the combination of extreme youth, low-trust TLD, and security-tool detections outweigh these signals.
Full dossier
Analysis complete

Page Content

The page title is 'NomorFlix' with a meta description positioning it as a watchlist and streaming-resume service. The page body is minimal—primarily just the site name—suggesting either a JavaScript single-page app that loads content dynamically or a placeholder. No contact email, phone, postal address, or social media links are present on the page. No login form or countdown timer is visible.

Infrastructure

The domain is hosted on IP 172.67.185.146 with a clean abuse score (0/100) and no reported abuse history. SSL is valid (Let's Encrypt, 71 days to expiry). The site loads external resources from Google Fonts, unpkg.com, and cdn.jsdelivr.net—common CDNs used by both legitimate and malicious sites. No malware or phishing payloads were detected in our sandbox analysis.

Domain History

Registered approximately 18 days ago via NICENIC INTERNATIONAL GROUP CO., LIMITED (a registrar with a known high percentage of spam and fraud registrations). The .icu TLD is flagged in our scam-network fingerprint as over-represented in scam farms. WHOIS privacy is not enabled, but the registrant address is listed as 7Tu'i Rd, Tonga—a jurisdiction commonly used for privacy-focused or evasive registrations. The domain is not indexed in global traffic rankings.

Web Reputation

Independent review aggregators assign a 0/100 trust score, citing the extremely young domain, hidden owner identity, and lack of user history. However, the site is listed in a community wiki for free streaming services with a positive 17/18 feature score, praising its modern UI, watchlist functionality, and low ad load. No user complaints or malware samples were found in public databases.

Risk Factors
7
  • Domain registered only 18 days ago on a high-risk .icu TLD heavily associated with scam operations.
  • Three security engines (alphaMountain.ai, Fortinet, Gridinsoft) flag the domain as spam or suspicious.
  • Independent review aggregators rate it 0/100 trust score, citing extreme youth and lack of established history.
  • No business registration found; WHOIS registrant address is in Tonga, a jurisdiction commonly used for evasive registrations.
  • No contact information (email, phone, address, or social links) visible on the page.
  • Registrar (NICENIC INTERNATIONAL GROUP CO., LIMITED) has a known high percentage of spam and fraud registrations.
  • Page content is minimal, suggesting either a placeholder or a JavaScript app that may not fully load in static analysis.
Positive Signals
5
  • Valid SSL certificate issued by Let's Encrypt with 71 days remaining.
  • Hosting IP has clean abuse reputation (0/100 score, no abuse reports).
  • Listed in a community wiki for free streaming with a positive 17/18 feature rating, indicating functional streaming capability.
  • No malware or phishing payloads detected in our sandbox analysis.
  • No scam-family fingerprints or credential-harvesting patterns triggered.
AI Recommendation
Do not enter payment information or personal credentials on this site. If you wish to use free streaming services, research established platforms with longer operating histories and transparent business information. The extreme youth of this domain combined with security-tool detections and poor independent ratings make it a high-risk choice despite the positive community wiki entry.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for nomorflix.icu, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
18 days
Registered May 2026
Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
2 scam reports · 1 positive
Key findings
7 headline facts from open-web research
  • Domain registered approximately May 29-30 2026 (age ~14-18 days at time of scans)
  • Scamadviser trust score 0/100 with negative factors: hidden WHOIS owner identity, very young domain, low Tranco rank, registrar with high spam/fraud percentage
  • Gridinsoft rates 7/100 trust score citing 4 blacklist detections, young domain, no established user review history; classified as suspicious website
  • Listed positively in FMHY free streaming wiki with 17/18 score for features including movies/TV/anime support, watchlists with login sync, modern UI, auto source switching, and low popups
  • No user complaints, malware samples, or specific scam family detections found beyond automated security tool warnings
  • SSL valid (Let's Encrypt DV); described as art/entertainment site; has active TikTok account promoting free movies/anime
  • Appears in Scamadviser daily top/new domains lists, indicating high volume of recent checks by users
Scam reports (2)
Direct quotes from public scam databases, forums, and news.
  • Scamadviseropen

    "In summary, nomorflix.icu might be a scam. We found several indicators for this."

  • Gridinsoftopen

    "Suspicious Website... classified as Suspicious Website based on multiple risk signals, including 4 blacklist detections, a very young domain (14 days)... 7/100 trust score."

Positive reviews (1)
Quotes indicating the site is legitimate.
  • FMHY Wikiopen

    "NomorFlix Score: 17/18 Has movies, TV, anime, 1080p, adjustable quality, and subtitles. UI is solid, feels modern and very unique. The site has watch lists..."

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Independent review aggregators assigned a 0/100 trust score, citing the 14–18 day domain age, privacy-protected WHOIS registration, and lack of established user history as primary risk factors. A community wiki for free streaming services (FMHY) rated the site 17/18, praising its modern UI, watchlist functionality with login sync, support for movies/TV/anime, and low ad load. No user complaints, malware samples, or specific scam-family detections were found beyond automated security-tool warnings. The site appears to have an active TikTok account promoting free movies and anime, suggesting active operation rather than abandonment.

Scam Network Intelligence

Cross-site correlation

This site shares signals with a broader cluster

Low correlation

Many scams don't operate alone. We correlate third-party scripts, hosting infrastructure, brand-impersonation signals, and the AI evidence package to detect when a site is part of a broader scam network.

Suspicion score
0/100
ClearLowModerateHighCritical
Evidence (1)
  • Short name on low-trust .icu TLD — over-represented on scam farms.
Linked signals (3)
unpkg.comcdn.jsdelivr.netPattern · LOW Trust TLD

Antivirus Engines

Detection matrix · live
3 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

0Malicious3Suspicious59Harmless92Engines
0
of 92
alphaMountain.ai
Suspicious· spam
Fortinet
Suspicious· spam
Gridinsoft
Suspicious· suspicious

3 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Domain History
Age18 days old
RegistrarNICENIC INTERNATIONAL GROUP CO., LIMITED
RegisteredMay 30, 2026
ExpiresMay 30, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · YE2
ExpiresAug 27, 2026 (71d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://nomorflix.icu/
  • 2200https://nomorflix.icu/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Scam-Type Likelihood

1 scam-type patterns detected
Scam-Type Likelihood

1 of 13 categories showed signals

We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.

Top match: Fake Shop
Fake Shop
Moderate likelihood
43/100
  • AI analyst tagged this as a fake shop.
  • No phone number or postal address anywhere on the page.
  • Multiple contact / trust-signal red flags on the page.
  • Domain is 18 days old — very young for a shop.

Fake-shop warning signs

Signals common to non-delivery scam shops were detected on this site.

  • Treat nomorflix.icu as unverified

    Do not enter credentials or send money until you have independently verified the business.

  • If you already paid by card or PayPal — start a chargeback

    Contact your bank or card issuer and dispute the charge as "goods not received" or "merchant fraud." PayPal users can open a case in the Resolution Centre. Act within 120 days for card chargebacks in most jurisdictions.

  • Save every piece of evidence

    Screenshots of the checkout, order confirmation emails, any chat transcripts, and the product listing page. Chargeback and fraud reports go faster when you have receipts.

  • Report the shop

    Report to the FTC (reportfraud.ftc.gov), Action Fraud UK, or your local consumer-protection body. Post the URL on the MalwareTips scam forum so other buyers can find it.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review marked nomorflix.icu as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
  • nomorflix.icu currently scores 43/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
  • Yes. nomorflix.icu presents a valid TLSv1.3 certificate issued by Let's Encrypt · YE2, expiring in 71 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • nomorflix.icu is 18 days old, registered on 5/30/2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • 3 out of 92 antivirus engines in our malware network flagged nomorflix.icu as malicious or suspicious. Even one detection is a meaningful signal.
  • No. nomorflix.icu is not currently listed on the major browser blocklist feeds that modern browsers use.
  • nomorflix.icu resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 17, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around nomorflix.icu have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·nomorflix.icu
SUSPICIOUS

NomorFlix is a free streaming aggregator registered only 18 days ago on a high-risk .icu domain. Multiple security tools flag it as suspicious, and independent review sites rate it poorly despite one positive wiki entry praising its features.

Do not enter payment information or personal credentials on this site. If you wish to use free streaming services, research established platforms with longer operating histories and transparent business information. The extreme youth of this domain combined with security-tool detections and poor independent ratings make it a high-risk choice despite the positive community wiki entry.

AV engines
92
MT passes
2
Net signals
3
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Suspicious reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.