netflix-how-i-met.pages.dev

Netflix

https://netflix-how-i-met.pages.dev Access site

Screenshot

Investigate

Domain netflix-how-i-met.pages.dev1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

IP 172.66.47.84

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://netflix-how-i-met.pages.dev

urlscan

Wayback

archive.today

Cert Google Trust Services

crt.sh

Censys

Google CT

Phishunt analysis Beta

34 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+4.5 Brand in title
+4.1 Brand in screenshot
+3.7 Brand in domain label
+1.1 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.7 Brand in cert SAN
+0.6 Long domain
+0.6 Suspicious TLD
+0.5 Young certificate
+0.3 Free CA
+0.3 Hyphens
+0.1 External scripts
+0.1 Deep subdomain

20 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Netflix-branded phishing page hosted on Cloudflare Pages, using the brand name and a TV show title in the domain. The page reproduces Netflix visual content and contains no real outbound links to Netflix. Confirmed malicious by urlscan, likely targeting streaming account credentials.

Brand in domain labelKeyword matchurlscan.io

AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 75%

Domain & Network

Whois

Registrar CloudFlare, Inc.

Network

IP 172.66.47.84

Country