Phishing detection: netflixinfos.com

Netflix
https://netflixinfos.com Access site
Screenshot
Screenshot of netflixinfos.com
Investigate
Domain netflixinfos.com1 CT host on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 45.74.47.181
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://netflixinfos.com
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
24 low suspicionheuristic risk score · not a probability
Why?
  • +6.1 Google Safe Browsing
  • +5.3 Keyword match
  • +3.7 Brand in domain label
  • +2.2 Country mismatch
  • +2.0 Young domain
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.6 Login text in screenshot
  • +0.3 Long domain
  • +0.2 Suspicious TLD
14 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Netflix using a lookalike domain containing the Netflix brand name. Login-related keywords appear in page text and Google Safe Browsing flags it as social engineering. Hosted in Germany on infrastructure operated by SLAYER GROUP LIMITED, with a multi-step redirect chain.

Google Safe BrowsingBrand in domain labelLogin text in screenshot
AI-generated from stored detector signals - the AI never visited the site. · 2026-09-15 · confidence 75%
Domain & Network
Whois
Registrar Cloudflare, Inc.
Network
IP 45.74.47.181
Country GermanyGermany
Hosting SLAYER GROUP LIMITED
ASN AS213441
TLS Cert -
External detection Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Report this phishing
Brand owner Netflix
phishing@netflix.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-09-14 23:24 UTC  ·  Last refreshed 2026-09-18 21:30 UTC