Phishing detection: most-watched-netflix-shows.pages.dev

Netflix
https://most-watched-netflix-shows.pages.dev Access site
Screenshot
Screenshot of most-watched-netflix-shows.pages.dev
Investigate
Domain most-watched-netflix-shows.pages.dev1 CT host on apex
URL https://most-watched-netflix-shows.pages.dev
Cert Let's Encrypt
Phishunt analysis Beta
33 medium suspicion suspiciousheuristic risk score · not a probability
Keyword matchLong domainHigh entropy
20 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Netflix using the brand name in its Cloudflare Pages subdomain and TLS certificate. Likely designed to lure visitors into disclosing streaming account credentials or payment details. Detected by urlscan and displaying Netflix branding in page content.

Brand in cert SANPaaS hostKeyword match
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 72%
Domain & Network
Whois
Registrar CloudFlare, Inc.
Network
Country United StatesUnited States
ASN AS13335
TLS Cert Let's Encrypt
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
PaaS platform Cloudflare Pages
Registrar CloudFlare, Inc.
Brand owner Netflix

Tracked from 2026-06-08 03:01 UTC  ·  Last refreshed 2026-08-11 07:30 UTC