Phishing detection: netflix.com.bd
Netflix Investigate
Domain
netflix.com.bd2 CT hosts on apex
IP
107.20.175.192
URL
https://netflix.com.bd
Cert
WR1
Phishunt analysis Beta
36
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +3.2 Brand favicon
- +2.7 ASN reputation
- +1.6 Favicon (kit)
- +1.3 Brand typo
- +1.1 No CSP header
- +0.9 Young certificate
- +0.7 Brand in cert SAN
- +0.7 Unrecognised DNS provider
- +0.6 Final host mismatch
- +0.6 Login text in screenshot
- +0.6 Suspicious TLD
- +0.3 Free CA
- +0.3 Long domain
- +0.1 External scripts
- +0.1 Deep subdomain
22 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Impersonates Netflix on a lookalike domain, using the Netflix favicon and title with login-related text. The certificate lists the brand name and the page redirects to the real Netflix site. Hosted on Amazon infrastructure and flagged by Google Safe Browsing as social engineering.
Brand faviconFavicon (kit)Brand in cert SAN
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-03 · confidence 80%
Domain & Network
Whois
Network
IP
107.20.175.192 AWS EC2
Country
United States
Hosting
Amazon.com, Inc.
ASN
AS14618
TLS Cert
WR1
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise