Security Scan Report: netflix-profile.com

Redirected to:
https://netflix-profile.com/captcha.html?fxc_bsig=bq1.YnE6NzU6MTc5Mzk2...
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 3 domains to perform 15 HTTP transactions. The main domain is netflix-profile.com and was registered 1 week ago.

Submitted URL: https://netflix-profile.com

Effective URL:
https://netflix-profile.com/captcha.html?fxc_bsig=bq1.YnE6NzU6MTc5Mzk2...
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Brand-abusing domain (netflix-profile.com, 3 days old) fronted by a fake browser-verification gate feeding a cloaking token; Safe Browsing marks it Social Engineering. Avoid — report.

Risk Factors (6)
Google Safe Browsing social-engineering detection
Newly registered domain (3 days) impersonating a major streaming brand in its hostname
Fake human-verification/captcha interstitial with kit-style token parameter (cloaking gate)
Suspicious external domain cloudiva.sbs referenced by the page
Title/og:title generic security-check wording unrelated to the domain
Network IDS HIGH alert (Spamhaus DROP listed traffic)
Domain age information unavailable

Details

Page Title

Vérification de sécurité

Scan Type

public

Domain Name Analysis

Domain 'netflix-profile.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'netflix-profile' covers 15 characters split between five vowels and 9 consonants, notching one hyphen. Breaking it apart gives 2 words: netflix, profile. Average segment length settles at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

\ Vérification du navigateur Confirmez que vous n'êtes pas un robot, puis continuez. Verify you are human

Page Load Overview

0.41s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr
Text Length:294 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content61% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

adult content
61%
documentation technical
60%
government public service
52%
technology software
50%
phishing scam
45%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.250.165.184Bulgaria
AS39997949.3 Networking LLC
5104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.18.94.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
153--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11B22F93AB544413B64B74EE019C8638B7D316061FAC30857F2AAA651CADBD573E33B49

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:HlSXYAsFW9AfjuW9869VJ6wWoH4SGqeVLhUt+g1F8ketIZz7c0CUL0:HUd8Lu49VJvWopGP1U/FGtQsUo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:10320:wSS0MEJQIKb6IIEgTCikBCQAQdTEKFnBIKksBSOQAQiIBhMQYCQISKAEAKewkBswAh4wxcpxCYpJaGPkskAOvUUCBRBIAIgU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101011919010101
Perceptual Hash:aa7722dd887622d9
Difference Hash:0101093131010101
Wavelet Hash:010101193d3d0303
Color Hash:N/A

Other Hashes

Crop Resistant:0101093133010101

Scan History

Scan history not available

Unable to load historical scan data