Security Scan Report: santino-c.github.io

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 1 country across 3 domains to perform 6 HTTP transactions. The main domain is github.io and was registered 13 years ago.

Submitted URL: https://santino-c.github.io/soporte.netflix/

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Netflix phishing kit on github.io: fake suspension notice collecting Netflix credentials and full card details, exfiltrated to a formsubmit.co Gmail drop. Flagged by Safe Browsing for social engineering.

Risk Factors (5)
Brand impersonation of Netflix on an unranked, non-Netflix github.io subdomain
Credential and payment card fields exfiltrated cross-origin to formsubmit.co via a Gmail address
Urgency/threat-of-suspension social engineering in Spanish
Free hosting namespace (github.io) where subdomain creation date is unknown
Fake 'Verificación completada' and 'Redirigiendo a Netflix' completion message to disarm victims
Domain age information unavailable

Details

Page Title

Netflix - Verificación de Cuenta

Scan Type

public

Domain Name Analysis

The domain 'santino-c.github.io' uses the British Indian Ocean Territory country-code top-level domain (.io) with subdomain 'santino-c'. The second-level label 'github' is 6 characters long containing 2 vowels alongside four consonants. Segmentation suggests 3 words: g, it, hub. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

NETFLIX Tu cuenta está a punto de suspenderse Hemos detectado un problema con tu método de pago anterior. Por favor, inicia sesión para actualizar tus datos y evitar la pérdida de tus series y pelíc...

Page Load Overview

1.75s
Total Load Time
12 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:615 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce40% confidence
Type: webapp
Method: structural

All Detected Categories

e-commerce
40%

Detected Features

Login Form
Payment

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6185.199.110.153Fastly · CDNUnited States
AS54113Fastly, Inc.
0185.199.111.153Fastly · CDNUnited States
AS54113Fastly, Inc.
0185.15.59.240United States
AS14907Wikimedia Foundation Inc.
045.57.91.1United States
AS40027Netflix Streaming Services Inc.
0185.199.109.153Fastly · CDNUnited States
AS54113Fastly, Inc.
0185.199.108.153Fastly · CDNUnited States
AS54113Fastly, Inc.
045.57.90.1United States
AS40027Netflix Streaming Services Inc.
67--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11CD1B61915F10C24658382B87BA1EA0B2D52C1136D8DC9607BDD8BE15FCAEC5CA77BE8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:OAOuOhQKzyxz/wpUCJJXKFjA1J7v66Vh6SzG:rOuOKkCCJJXKOL7i636SzG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6506:AAIRIEgCEiAFgYCAwIaAAUCEAV3EhpDQAqRAvGqoWBwNBClIQUkIAAUICbGAAmIctQqCCAiIiAEEIkCQBABYAgAlAKAtgQEI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0008181818181800
Perceptual Hash:cc66339933cccc66
Difference Hash:0010303030303000
Wavelet Hash:001838383c3c3c3c
Color Hash:N/A

Other Hashes

Crop Resistant:0010303030303000

Scan History

Scan history not available

Unable to load historical scan data