Phishing detection: netflixgt.com

Netflix
https://netflixgt.com Access site
Screenshot
No screenshot available yet Captured automatically on the next refresh cycle
Investigate
Domain netflixgt.com2 CT hosts on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 101.1.16.10
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://netflixgt.com
urlscan Wayback archive.today
Cert YR1
crt.sh Censys Google CT
Phishunt analysis Beta
24 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +4.0 Young domain
  • +3.7 Brand in domain label
  • +3.0 PhishTank
  • +1.9 Brand typo
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.9 Young certificate
  • +0.9 No registrar lock
  • +0.7 Brand in cert SAN
  • +0.3 Free CA
  • +0.3 Long domain
  • +0.2 Suspicious TLD
15 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Lookalike domain that places the Netflix name in its apex label, reported in PhishTank. It likely imitates Netflix sign-in or billing pages to harvest credentials. It is hosted on 69HOST with a free-CA certificate and lacks CSP and HSTS headers.

Brand in domain labelPhishTankBrand typo
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-09 · confidence 75%
Domain & Network
Whois
Registrar Name.com, Inc.
Network
IP 101.1.16.10
Country United StatesUnited States
Hosting 69HOST LLC
ASN AS205397
TLS Cert YR1
External detection PhishTank
CleanGoogle Safe Browsing · OpenPhish · TweetFeed · urlscan.io · SANS ISC
Report this phishing
Registrar Name.com, Inc.
abuse@name.com
Brand owner Netflix
phishing@netflix.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-11-09 19:01 UTC  ·  Last refreshed 2026-11-11 23:30 UTC