mail.account-payment.netflix.20-172-202-170.cpanel.site

Netflix

https://mail.account-payment.netflix.20-172-202-170.cpanel.site Access site

Screenshot

No screenshot available yet Captured automatically on the next refresh cycle

Investigate

Domain mail.account-payment.netflix.20-172-202-170.cpanel.site33 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 20.172.202.170

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://mail.account-payment.netflix.20-172-202-170.cpanel.…

urlscan

Wayback

archive.today

Cert -

crt.sh

Censys

Google CT

Phishunt analysis Beta

25 low suspicionheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+2.6 Brand in subdomain
+2.0 Site cluster
+2.0 Young domain
+1.2 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.8 Brand + login token
+0.7 Unrecognised DNS provider
+0.6 Long domain
+0.6 Deep subdomain
+0.6 Suspicious TLD
+0.4 Hyphens

16 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Netflix payment-themed phishing on a deeply nested cpanel.site hostname that embeds the brand and an IP-style label. Flagged by Google Safe Browsing and combosquatting patterns, it likely harvests account and billing details. Hosted on Microsoft infrastructure.

Google Safe BrowsingBrand + login tokenBrand in subdomain

AI-generated from stored detector signals - the AI never visited the site. · 2026-10-17 · confidence 80%

Domain & Network

Whois

Registrar Tucows Domains Inc.

Network

IP 20.172.202.170 Microsoft Azure AzureCloud.eastus

Country