Security Scan Report: 85.215.226.225

Site favicon
Submitted: Completed: publiccompleted
This website contacted 2 IPs in 2 countries across 1 domain to perform 14 HTTP transactions. The main domain is 85.215.226.225.

Submitted URL: http://85.215.226.225/Netflix/Home/login.php

AI Security Verdict

Confirmed Scam

Confidence: 98%

10
Risk Score

Confirmed Netflix phishing page hosted on a bare IP, using a credential-harvesting login form and flagged by Google Safe Browsing for social engineering.

Risk Factors (5)
Brand impersonation of Netflix on a non-Netflix domain/IP address
Credential-harvesting login form with username and password fields
Google Safe Browsing social engineering / phishing detection
Domain is unranked in Cisco Umbrella top 1M while claiming to be a major entertainment brand
Hosted on a bare IP address rather than an official Netflix domain
Domain age information unavailable

Details

Page Title

Netflix

Scan Type

public

Domain Name Analysis

You're looking at domain '85.215.226.225' on an unknown top-level domain without a subdomain. The registrable portion '85.215.226.225' spans 14 characters holding 0 vowels versus zero consonants, notching eleven digits. Breaking it apart gives 4 words: 85, 215, 226, 225. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

— . New to Netflix? Sign up now. Us ™ L ; F wy, y 4 prs — Terms of Use Privacy Statement

Page Load Overview

0.79s
Total Load Time
950 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:54%
Script:Latin
Direction:ltr

Detection Details

Text Length:325 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media77% confidence
Type: webapp
Method: ml+structural

All Detected Categories

entertainment media
77%
social media network
60%
technology software
44%
phishing/scam
40%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
785.215.226.225Germany
AS8560IONOS SE
7142.251.14.132Google · CDNUnited States
AS15169Google LLC
142--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EF42C620F6454D3B5123C9F47CA7F70878B7C15BC7064C1872FC86AA5FE7E868A22669

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:uPdUBNFxyH1M2qS6D+60o8jz4C8hEFFoHP9CikdrG:UONFx+MLnDd0oQ4qFFO9CBG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:12641:gAkbEmRcoNYIDCwtLCQQQlEB4tAGIkE5ZAhGCUBIUJwBgAAUYXAeIIgXiCOrAQAIFWnUgligxGERHi7I+EAtARg4WEhMCIIi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:eff3df1945632300
Perceptual Hash:a2b843e31a9fb594
Difference Hash:4b8736538dcf47cd
Wavelet Hash:ffe19f014563e700
Color Hash:N/A

Other Hashes

Crop Resistant:4b8736538dcf46cd

Scan History

Scan history not available

Unable to load historical scan data