Security Scan Report: netflix-update.employmentlawyerlongisland.com

Redirected to:
https://www.snrt.ma/fr
Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 3 countries across 14 domains to perform 161 HTTP transactions. The main domain is employmentlawyerlongisland.com and was registered 5 years ago.

Submitted URL: https://netflix-update.employmentlawyerlongisland.com

Effective URL:
https://www.snrt.ma/fr
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Netflix-branded credential phishing page on a non-Netflix domain with cloaking (datacenter vs residential content differs). Report as scam.

Risk Factors (4)
Brand impersonation of Netflix on a non-Netflix domain
Credential harvesting login form (email + password)
Cloaking / bot-protection bypass: different content for datacenter vs residential clients
Suspicious redirect from an unrelated subdomain ending on a compromised or abused domain
Domain age information unavailable

Details

Page Title

Netflix

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'netflix-update.employmentlawyerlongisland.com' is registered with subdomain 'netflix-update'. Count 26 characters in 'employmentlawyerlongisland' holding 8 vowels versus 18 consonants. Segmentation suggests 4 words: employment, lawyer, long, island. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Email or mobile number Password OR Forgot password? @ Remember me New to Netflix? Sign up now This page is protected by Google reCAPTCHA sure you're not a bot. Learn more

Page Load Overview

1.99s
Total Load Time
48.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:217 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media92% confidence
Type: webapp
Method: ml+structural

All Detected Categories

entertainment media
92%
adult content
42%
technology software
37%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11185.181.255.106Dallas, Texas, United States
AS36454WHG Hosting Services Ltd
10157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
10157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
10104.26.13.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10149.154.166.110Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
10172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.26.12.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10192.124.249.106Menifee, California, United States
AS30148Sucuri
10142.251.20.95Google · CDNUnited States
AS15169Google LLC
10142.251.110.97Google · CDNUnited States
AS15169Google LLC
16116--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16D02C53C05943BB3673709CB28D38EB73597532DE8B36548E0BC863366D5C900D43A9A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:44sUeKO3wnKKNNaN6dx1iLzfNLd83a7xA+VucpUW990H1uNaqU4yDIT96EG43pzx:rhE3AvFd/iLTNB1ZVuM9k4/fLNO5A

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8341:IUnIAdTSUDmISBQBkgAYmKW8gMgGIQALBFTklsDUg0UgIDCKgA2cJAHLkYr1Yh5hBFIAw4BJDECQGgeAsKFjFBCiAiQBESAD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c6e6c210f1e161e1
Perceptual Hash:e0d4b2ac9c1dadd1
Difference Hash:9494962227c7cbc9
Wavelet Hash:d7e6c630e1e161e1
Color Hash:39c00008000

Other Hashes

Crop Resistant:9494962227c7cbc9

Scan History

Scan history not available

Unable to load historical scan data