netflixzj.pages.dev - phishunt.io

Netflix

https://netflixzj.pages.dev Access site

Screenshot

Investigate

Domain netflixzj.pages.dev1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

IP 172.66.44.118

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://netflixzj.pages.dev

urlscan

Wayback

archive.today

Cert Google Trust Services

crt.sh

Censys

Google CT

Phishunt analysis Beta

34 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+4.5 Brand in title
+4.1 Brand in screenshot
+3.7 Brand in domain label
+1.1 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+0.9 Young certificate
+0.7 Brand in cert SAN
+0.6 Suspicious TLD
+0.4 Long domain
+0.3 Free CA
+0.1 Deep subdomain

18 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Site impersonates Netflix on Cloudflare Pages using a domain embedding the brand name. The certificate names Netflix and the site shares infrastructure with similar phishing clusters. Flagged by urlscan as malicious, likely harvesting streaming account credentials.

Brand in domain labelPaaS hosturlscan.io

AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 78%

Domain & Network

Whois

Registrar CloudFlare, Inc.

Network

IP 172.66.44.118

Country