Security Scan Report: netflix-recovery.com

Redirected to:
https://netflix-recovery.com/404
Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is netflix-recovery.com and was registered 3 weeks ago.

Submitted URL: https://netflix-recovery.com

Effective URL:
https://netflix-recovery.com/404
Redirected

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Netflix-impersonating hostname ('netflix-recovery') on a 12-day-old unranked domain, currently showing only a 404; the deceptive name plus a high IDS/Samhaus alert mark it as likely phishing infrastructure.

Risk Factors (4)
Deceptive hostname impersonating the Netflix brand ('netflix-recovery')
Very new domain (12 days old)
Domain unranked / no established reputation
High-severity network IDS alert (ET DROP Spamhaus DROP Listed Traffic Inbound)
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'netflix-recovery.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'netflix-recovery' is 16 characters long holding 5 vowels versus ten consonants; bonus characters include one hyphen. Tokenizing the label suggests 2 words: netflix, recovery. Median word length comes out to 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://netflix-recovery.com

Page Load Overview

1.07s
Total Load Time
431 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:57 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content53% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
53%
news media journalism
53%
healthcare medical
52%
government public service
47%
documentation technical
45%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
545.74.61.11United States
AS20539769HOST LLC
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
102--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T175624680B41C12746D3FAB01DEC8973CD125B9426F624866A10E088FE9D7FF639E5F96

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:CugpOxWp35nTtXC2s1Bpu0qN4QOigg/JpcXTTruLxksc64JyhOq7vm1:CFOx05nrGPKJgg8T4xksc64Jysq7vW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15804:dIFwICZBgFIIBXVMR4ghCgOQAIoEBtOCQEgSCYCAZSEgppDLpCkFbQQQYCCSC8J0YTAJISi7RPgC4UBEMgDhEArAEK5QSAQ0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3fffffffffffffff
Perceptual Hash:83070707070f1fff
Difference Hash:c000000000000000
Wavelet Hash:30f0f0f0f0f0f0f0
Color Hash:#782d86

Other Hashes

Crop Resistant:c000000000000000

Scan History

Scan history not available

Unable to load historical scan data