Phishing detection: netflixseries.com
Netflix Screenshot
Investigate
Domain
netflixseries.com37 CT hosts on apex
urlscan
VirusTotal
Whois
IP
63.176.8.218
ipinfo
Greynoise
URL
https://netflixseries.com
Phishunt analysis Beta
41
high suspicion likely_phishingheuristic risk score · not a probability
Why?
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +4.0 Young domain
- +3.7 Brand in domain label
- +3.0 OpenPhish
- +2.2 Country mismatch
- +1.9 ASN reputation
- +1.7 Shared IP cluster
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.9 Young certificate
- +0.7 Brand in cert SAN
- +0.6 Login text in screenshot
- +0.3 Free CA
- +0.3 Long domain
- +0.2 Suspicious TLD
- +0.1 External scripts
21 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
The site uses Netflix in its domain name and page title while linking out to no legitimate Netflix content, and is flagged by OpenPhish. It is hosted on Amazon infrastructure in Germany and likely collects Netflix account or payment details.
Brand in domain labelOpenPhishBrand in title
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-09 · confidence 70%
Domain & Network
Whois
Registrar
Name.com, Inc.
Network
IP
63.176.8.218 AWS EC2
Country
Germany
Germany
Hosting
Amazon.com, Inc.
ASN
AS16509
TLS Cert
YE2
External detection
OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io · SANS ISC
Requests
Resources
Observables
Related websites
Report this phishing
Network / ASN
Amazon.com, Inc.
Brand owner
Netflix
Submit to blocklists