Phishing detection: netflix-dinosaur.pages.dev
Netflix Investigate
Domain
netflix-dinosaur.pages.dev1 CT host on apex
IP
188.114.96.3
URL
https://netflix-dinosaur.pages.dev
Cert
Let's Encrypt
Phishunt analysis Beta
30
low suspicionheuristic risk score · not a probability
Keyword matchBrand in domain labelHigh entropy
19 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting
Site impersonates Netflix on a Cloudflare Pages subdomain with the brand name embedded in the apex label, confirmed malicious by URLScan. Netflix branding appears in the captured screenshot and the domain lacks content security headers, indicating a credential-harvesting page.
urlscan.ioPaaS hostBrand in screenshot
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 74%
Domain & Network
Whois
Registrar
CloudFlare, Inc.
Network
IP
188.114.96.3
Country
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
Let's Encrypt
External detection
urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
Submit to blocklists
urlscan
VirusTotal
Whois
ipinfo
Greynoise