Phishing detection: netflix-dinosaur.pages.dev

Netflix
https://netflix-dinosaur.pages.dev Access site
Screenshot
Screenshot of netflix-dinosaur.pages.dev
Investigate
Domain netflix-dinosaur.pages.dev1 CT host on apex
URL https://netflix-dinosaur.pages.dev
Cert Let's Encrypt
Phishunt analysis Beta
30 low suspicionheuristic risk score · not a probability
Keyword matchBrand in domain labelHigh entropy
19 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Netflix on a Cloudflare Pages subdomain with the brand name embedded in the apex label, confirmed malicious by URLScan. Netflix branding appears in the captured screenshot and the domain lacks content security headers, indicating a credential-harvesting page.

urlscan.ioPaaS hostBrand in screenshot
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 74%
Domain & Network
Whois
Registrar CloudFlare, Inc.
Network
Country United StatesUnited States
ASN AS13335
TLS Cert Let's Encrypt
External detection urlscan.io
CleanGoogle Safe Browsing · OpenPhish · PhishTank · TweetFeed
Report this phishing
PaaS platform Cloudflare Pages
Registrar CloudFlare, Inc.
Brand owner Netflix

Tracked from 2026-07-06 22:27 UTC  ·  Last refreshed 2026-07-29 01:30 UTC