Phishing detection: netflixrimborso.com

Netflix
https://netflixrimborso.com Access site
Screenshot
Screenshot of netflixrimborso.com
Investigate
Domain netflixrimborso.com1 CT host on apex
urlscan page.domain VirusTotal Whois
IP 62.149.189.54
urlscan page.ip VirusTotal ipinfo Greynoise
URL https://netflixrimborso.com
urlscan Wayback archive.today
Cert Actalis S.p.A.
crt.sh Censys Google CT
Phishunt analysis Beta
33 medium suspicion suspiciousheuristic risk score · not a probability
Keyword matchBrand in domain labelHigh entropy
19 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Netflix using an Italian refund-themed domain targeting Italian-speaking users. It combines Netflix branding with a billing refund lure to harvest account credentials, hosted in Italy and confirmed malicious by URLScan.

Brand in domain labelCountry mismatchurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-24 · confidence 86%
Domain & Network
Whois
Registrar Tucows Domains Inc.
Network
IP 62.149.189.54
Country ItalyItaly
Hosting Aruba S.p.A.
ASN AS31034
TLS Cert Actalis S.p.A.
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Brand owner Netflix
phishing@netflix.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-04-09 04:47 UTC  ·  Last refreshed 2026-08-11 07:30 UTC