ScanMalware.com

Security Scan Report: netflixxaa.com

Redirected to:
https://netflixxaa.com/#/
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a71fe96a-8899-44f0-9f52-147c67f460ddDomain and IP registration (RDAP)/api/v1/rdap/a71fe96a-8899-44f0-9f52-147c67f460ddHow often this domain was scanned/api/v1/domain/stats/netflixxaa.comScan history for this domain/api/v1/domain/history/netflixxaa.com?limit=15
This website contacted 5 IPs in 2 countries across 3 domains to perform 46 HTTP transactions. The main domain is netflixxaa.com and was registered 10 months ago.

Submitted URL: http://netflixxaa.com/

Effective URL:
https://netflixxaa.com/#/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

New, unranked site impersonating Netflix with social‑engineering lure – confirmed phishing scam.

Risk Factors (4)
Social engineering threat detected by Google Safe Browsing
Brand impersonation (Netflix) on a newly registered domain
Critical domain age (<7 days) with no established reputation
UNRANKED domain lacking Cisco Umbrella ranking
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'netflixxaa.com' is registered with no subdomain. The core label 'netflixxaa' covers 10 characters holding four vowels versus 6 consonants. Tokenizing the label suggests 4 words: netflix, x, a, a. Expect 1 character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

English v New User Join Now eat Login No need to open an account, create a demo account to trade now!

Page Load Overview

3.53s
Total Load Time
802 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:393 chars
Detector Agreement:100%
Language mismatch: Declared as zh-CN but detected as en

Website Classification

Primary Category

e-commerce shopping35% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

e-commerce shopping
35%
finance banking
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10106.54.228.253China
AS45090Shenzhen Tencent Computer Systems Company Limited
9172.67.193.129United States
AS13335CLOUDFLARENET
9124.222.174.117ChinaUnknown
9188.114.96.3ChinaUnknown
9104.21.57.237United States
AS13335CLOUDFLARENET
465--

Detected Technologies1

X-UA-Compatible
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15E142A31A44D18E5B333C456A290EB1E6965F233C1920EACF396262C8FC7FD715A7B58

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:qAuFosuhOicImgcaqTND1j8fAUy+zNGUf:lucZmgcaqJDCfk+zNGU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:199617:FEECQuQYSQgqTBNySBiMiGSyENAMYVG4IUKfLAt/EQiYwBiAQWBloEAAHACJgIJRAwAxbUAECCiGBgTAYbIQFNoC5JCwPIBZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff0000ffffff
Perceptual Hash:fed0c07a7ad4d02a
Difference Hash:000180514d882100
Wavelet Hash:f0ffff7e00003030
Color Hash:N/A

Other Hashes

Crop Resistant:000180514d882100,0000081010100000

Scan History

Scan history not available

Unable to load historical scan data