Phishing detection: netflixure.org

Netflix
http://netflixure.org Access site
Screenshot
Screenshot of netflixure.org
Investigate
Domain netflixure.org0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 85.121.176.148
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://netflixure.org
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
50 high suspicion likely_phishingheuristic risk score · not a probability
Keyword matchBrand in domain labelGoogle Safe Browsing
21 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Netflix on a 2-day-old domain hosted in Moldova by a budget provider. Contains a password input field and is flagged by Google Safe Browsing, OpenPhish, and urlscan. Targets Netflix account credentials.

Password fieldYoung domainOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-18 · confidence 93%
Domain & Network
Whois
Registrar Hosting Concepts B.V. d/b/a Registrar.eu
Network
IP 85.121.176.148
Country MoldovaMoldova
Hosting ALEXHOST SRL
ASN AS200019
TLS Cert -
External detection Google Safe Browsing OpenPhish urlscan.io
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · TweetFeed
Report this phishing
Brand owner Netflix
phishing@netflix.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-18 13:01 UTC  ·  Last refreshed 2026-08-18 13:30 UTC