most-watched-netflix-shows.pages.dev

Netflix

https://most-watched-netflix-shows.pages.dev Access site

Screenshot

Investigate

Domain most-watched-netflix-shows.pages.dev1 CT host on apex

urlscan

page.domain

VirusTotal

Whois

IP 172.66.46.225

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://most-watched-netflix-shows.pages.dev

urlscan

Wayback

archive.today

Cert Let's Encrypt

crt.sh

Censys

Google CT

Phishunt analysis Beta

33 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+5.3 Keyword match
+5.1 Site cluster
+5.1 urlscan.io
+4.5 Brand in title
+4.1 Brand in screenshot
+1.6 Favicon (kit)
+1.1 ASN reputation
+1.1 No CSP header
+1.1 No HSTS header
+1.0 Young domain
+0.7 Brand in cert SAN
+0.6 Long domain
+0.6 Suspicious TLD
+0.3 Free CA
+0.3 Hyphens
+0.1 External scripts
+0.1 Deep subdomain

20 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Site impersonates Netflix using the brand name in its Cloudflare Pages subdomain and TLS certificate. Likely designed to lure visitors into disclosing streaming account credentials or payment details. Detected by urlscan and displaying Netflix branding in page content.

Brand in cert SANPaaS hostKeyword match

AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 72%

Domain & Network

Whois

Registrar CloudFlare, Inc.

Network

IP 172.66.46.225

Country