netflix520.com - phishunt.io

Netflix

https://netflix520.com Access site

Screenshot

Investigate

Domain netflix520.com102 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

See every phishunt record for this domain

IP 104.21.48.216

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://netflix520.com

urlscan

Wayback

archive.today

Cert Let's Encrypt

crt.sh

Censys

Google CT

Phishunt analysis Beta

30 low suspicionheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+4.1 Brand in screenshot
+3.7 Brand in domain label
+1.9 ASN reputation
+1.3 Brand typo
+1.1 No CSP header
+0.7 Brand in cert SAN
+0.6 Registrar reputation
+0.3 Free CA
+0.3 Long domain
+0.2 Suspicious TLD
+0.1 External scripts

17 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Site impersonates Netflix by appending a numeric suffix to the brand name on a standalone domain. Urlscan flags it as malicious. Netflix branding is confirmed in page screenshots. Likely a fake subscription or account page designed to harvest payment details or login credentials.

urlscan.ioBrand in domain labelBrand in screenshot

AI-generated from stored detector signals - the AI never visited the site. · 2026-07-22 · confidence 70%

Domain & Network

Whois

Registrar NameSilo, LLC

Network

IP 104.21.48.216

Country