Security Scan: Index of /

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b1f8d5d9-d373-47ee-97bf-7298c4c84209 Domain and IP registration (RDAP)/api/v1/rdap/b1f8d5d9-d373-47ee-97bf-7298c4c84209How often this domain was scanned/api/v1/domain/stats/mail.account-payment.netflix.20-172-202-170.cpanel.site Scan history for this domain/api/v1/domain/history/mail.account-payment.netflix.20-172-202-170.cpanel.site?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is cpanel.site and was registered 2 years 1 month ago.

Submitted URL: https://mail.account-payment.netflix.20-172-202-170.cpanel.site

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Netflix-branded 'account-payment' hostname on a cpanel.site/IP-labelled subdomain, flagged by Safe Browsing for social engineering and serving only a bare directory index. Classic phishing infrastructure — avoid.

Risk Factors (4)

Brand impersonation of Netflix in the hostname on a non-Netflix domain

Google Safe Browsing social-engineering detection on the exact URL

Domain is unranked in Cisco Umbrella despite claiming a major brand name

Directory-listing page with embedded-IP host label consistent with throwaway phishing infrastructure

Domain age information unavailable

Details

Page Title

Index of /

Scan Type

public

Domain Name Analysis

The domain 'mail.account-payment.netflix.20-172-202-170.cpanel.site' uses the .site top-level domain; it also runs on subdomain 'mail.account-payment.netflix.20-172-202-170'. Count 6 characters in 'cpanel' holding 2 vowels versus four consonants. It segments into 2 words: c, panel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.23s

Total Load Time

1 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:71%

Script:Latin

Direction:ltr

Detection Details

Text Length:85 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software36% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

36%

news media journalism

35%

real estate property

27%

adult content

26%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	20.172.202.170Azure · CLOUD	Dulles, Virginia, United States	AS8075Microsoft Corporation
2	1	-	-

Detected Technologies1

Apache HTTP Server

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B501734964E022B72881351F94807DCA85F1C5B983F14DB43C4FB493CB44FF890072E9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:BMQtJOo9VxRsTdO0sszLxeMLZQlLeLft9WRHeE9xmPPnMFYz65+EpHeAg:WCFx+49snxeWZyoft9el9xmMFY5Ep5g

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:658:AAAAAAAgAAAAAAAEAAIAAAACQAAAAFAAAAAAAAAAAAAAABAAAAAAAAACAAAAAAEAAADAAAAgEAAAAAAAQAAAAAAACAAAAAAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3fffffffffffff

Perceptual Hash:8101010303ffffff

Difference Hash:c0c0000000000000

Wavelet Hash:3030f0f0f0f0f0f0

Color Hash:#78533a

Other Hashes

Crop Resistant:c0c0000000000000

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: mail.account-payment.netflix.20-172-202-170.cpanel.site