ScanMalware.com

Security Scan Report: netfllliix-clone.netlify.app

Redirected to:
https://netfllliix-clone.netlify.app/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/53dadf33-a448-4147-96a7-c358aec3e532Domain and IP registration (RDAP)/api/v1/rdap/53dadf33-a448-4147-96a7-c358aec3e532How often this domain was scanned/api/v1/domain/stats/netfllliix-clone.netlify.appScan history for this domain/api/v1/domain/history/netfllliix-clone.netlify.app?limit=15
This website contacted 4 IPs in 2 countries across 2 domains to perform 18 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: http://netfllliix-clone.netlify.app/

Effective URL:
https://netfllliix-clone.netlify.app/
Redirected

AI Security Verdict

High Risk

Confidence: 92%

8
Risk Score

Page impersonates Netflix and collects email via a phishing form; flagged by Safe Browsing as social engineering.

Risk Factors (5)
Safe Browsing social engineering indicator
Brand impersonation of Netflix on non‑official domain
Unranked domain with unknown creation date
Credential‑style email form used for account creation
Hosted on shared Netlify subdomain (easy to create new sites)
Domain age information unavailable

Details

Page Title

Netflix

Scan Type

public

Domain Name Analysis

The domain name 'netfllliix-clone.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain 'netfllliix-clone'. Count 7 characters in 'netlify' containing 2 vowels alongside five consonants. Breaking it apart gives three words: net, li, fy. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://netfllliix-clone.netlify.app/

Page Load Overview

6.12s
Total Load Time
632 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:3,218 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media75% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
75%
technology software
52%
download file sharing
42%
social media network
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
663.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
435.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
4192.178.183.95Google · CDNUnited States
AS15169Google LLC
184--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C733C79252F4923FE00BD29DA79562917D6B929FF641C7C0F36E4F6E0F908460C8B366

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:gOZTgoztqRaTOSsgl2epzXtjMODk8Wu6Hkv8tK32U:nTnzMUV5MPBS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:52876:sCSgBTABBBiUbcDEZKoIiUC8gACpVADkCIegQcAoCBqtggCAX4AAJAQhVAItEInkguNcaKm5YGCZCCNAQAAAuNuACdv2EZKg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0600181c0c003e7e
Perceptual Hash:8279877994798c9b
Difference Hash:9cccb1b9b9a5cccc
Wavelet Hash:4e06381c1d257e7f
Color Hash:#b7bf40

Other Hashes

Crop Resistant:464646800200200e,f6266d3672da1a6a,a4b4b7a3232426ae,9cccb0b8b8a5cccc

Scan History

Scan history not available

Unable to load historical scan data