Phishing detection: netflix6.com

Netflix
https://netflix6.com Access site
Screenshot
Screenshot of netflix6.com
Investigate
Domain netflix6.com4 CT hosts on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 101.32.126.3
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://netflix6.com
urlscan Wayback archive.today
Cert SSL Corporation
crt.sh Censys Google CT
Phishunt analysis Beta
28 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 urlscan.io
  • +4.5 Brand in title
  • +2.6 ASN reputation
  • +2.6 Brand typo
  • +2.2 Country mismatch
  • +2.0 Site cluster
  • +1.1 No CSP header
  • +0.7 Brand in cert SAN
  • +0.6 Registrar reputation
  • +0.5 Young certificate
  • +0.2 Long domain
  • +0.2 Suspicious TLD
16 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Netflix using a lookalike domain with a numeric suffix that closely matches the brand by Levenshtein distance. Hosted via Tencent infrastructure in Singapore despite targeting an international service. Confirmed malicious by urlscan.

Brand in titleBrand typourlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 72%
Domain & Network
Whois
Registrar NameSilo, LLC
Network
IP 101.32.126.3
Country SingaporeSingapore
Hosting Tencent Building, Kejizhongyi Avenue
ASN AS132203
TLS Cert SSL Corporation
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Network / ASN Tencent Building, Kejizhongyi Avenue
tencent_noc@tencent.com Web form
Registrar NameSilo, LLC
abuse@namesilo.com
Brand owner Netflix
phishing@netflix.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-01 16:46 UTC  ·  Last refreshed 2026-08-31 09:30 UTC