Security Scan Report: www.netflixy-bixy.vercel.app

Redirected to:
https://netflixy-bixy.vercel.app/
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 2 countries across 9 domains to perform 34 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://www.netflixy-bixy.vercel.app/

Effective URL:
https://netflixy-bixy.vercel.app/
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Fake Netflix-branded 'security check' page on a vercel.app subdomain of unknown age; the primary domain is reported as phishing. Brand impersonation plus a phishing indicator — do not enter any credentials.

Risk Factors (4)
Fake Netflix-branded security-check interstitial on a non-Netflix domain
Phishing threat-intel match on the primary domain (single-source, unverified)
Free vercel.app subdomain with unknown creation date used to host brand-impersonating content
Page content appears designed to funnel visitors toward a credential-harvesting step (no form captured in this snapshot)
Domain age information unavailable

Details

Page Title

Netflix

Scan Type

public

Domain Name Analysis

Domain 'www.netflixy-bixy.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'www.netflixy-bixy'. Its registrable label 'vercel' stretches across 6 characters containing two vowels alongside 4 consonants. Segmentation suggests 2 words: ver, cel. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.netflixy-bixy.vercel.app/

Page Load Overview

1.08s
Total Load Time
1015 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:281 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media97% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
97%
adult content
48%
documentation technical
44%
government public service
36%
technology software
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2216.198.79.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2172.67.68.11Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.127.95Google · CDNUnited States
AS15169Google LLC
2104.26.8.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.157.119Google · CDNUnited States
AS15169Google LLC
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
2149.154.166.110Amsterdam, North Holland, Netherlands
AS62041Telegram Messenger Inc
264.29.17.67Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2104.26.2.143Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3413--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10B22E8BAA610006E7D1384DBFCD0B7597107A1C7EA2EC6B9B9DE9500B7DB5E248D7308

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:QTXhGGY+DJc47JXeS7JXex/27xKRGpUW2U:QD6mhL74R3W5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10731:KBLBIQRDELUWBqAAfMO4MImRPIOBEKhhQbEA28CkFIUhE4Awwmg5GAEAHB0CEYFEIqQAHxgpQBAEgkMEgjYqAQBAQamWTXBS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e7e7e7e7ff
Perceptual Hash:b3c68c99cc33338e
Difference Hash:00100c0c0c4c0820
Wavelet Hash:c3c3c7c7c0c0c0d0
Color Hash:#ac539c

Other Hashes

Crop Resistant:00100c0c0c4c0820

Scan History

Scan history not available

Unable to load historical scan data