netflix-sandy-alpha.vercel.app

Netflix

https://netflix-sandy-alpha.vercel.app Access site

Screenshot

Investigate

Domain netflix-sandy-alpha.vercel.app0 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 64.29.17.195

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://netflix-sandy-alpha.vercel.app

urlscan

Wayback

archive.today

Cert WR1

crt.sh

Censys

Google CT

Phishunt analysis Beta

41 high suspicion likely_phishingheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+4.5 Brand in title
+3.7 Brand in domain label
+3.4 Cert reuse
+3.4 Shared IP cluster
+3.0 OpenPhish
+2.0 Young domain
+1.1 ASN reputation
+1.1 No CSP header
+0.6 Long domain
+0.6 Login text in screenshot
+0.6 Suspicious TLD
+0.3 Free CA
+0.2 Hyphens
+0.1 Deep subdomain

19 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

A Netflix-themed page on a Vercel app subdomain impersonates the streaming service, with the brand in the host name and title. Google Safe Browsing flags it as social engineering, and it shares certificate and IP clusters with other suspicious sites.

Google Safe BrowsingBrand in domain labelPaaS host

AI-generated from stored detector signals - the AI never visited the site. · 2026-10-16 · confidence 80%

Domain & Network

Whois

Registrar Tucows Domains Inc

Network

IP 64.29.17.195

Country