Phishing detection: netflix520.com
Netflix Screenshot
Investigate
Domain
netflix520.com102 CT hosts on apex
urlscan
VirusTotal
Whois
IP
104.21.48.216
ipinfo
Greynoise
URL
https://netflix520.com
Phishunt analysis Beta
29
low suspicionheuristic risk score · not a probability
Keyword matchBrand in domain labelurlscan.io
16 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting
Site impersonates Netflix by appending a numeric suffix to the brand name on a standalone domain. Urlscan flags it as malicious. Netflix branding is confirmed in page screenshots. Likely a fake subscription or account page designed to harvest payment details or login credentials.
urlscan.ioBrand in domain labelBrand in screenshot
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-22 · confidence 70%
Domain & Network
Whois
Registrar
NameSilo, LLC
Network
Country
United States
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Let's Encrypt
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Brand owner
Netflix
Submit to blocklists