Phishing detection: netflix-online.pages.dev
Netflix Screenshot
No screenshot available yet
Captured automatically on the next refresh cycle
Investigate
Domain
netflix-online.pages.dev1 CT host on apex
IP
172.66.47.172
URL
https://netflix-online.pages.dev
Cert
Let's Encrypt
Phishunt analysis Beta
26
low suspicionheuristic risk score · not a probability
Keyword matchBrand in domain labelPaaS host
16 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting
Impersonates Netflix using a free Cloudflare Pages account with the brand name embedded directly in the subdomain. Flagged as malicious by urlscan, the PaaS-hosted page likely presents a fake login to harvest Netflix credentials, exploiting legitimate infrastructure to complicate takedowns.
urlscan.ioBrand in domain labelPaaS host
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-12 · confidence 78%
Domain & Network
Whois
Registrar
CloudFlare, Inc.
Network
Country
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Let's Encrypt
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise