Security Scan Report: www.netflix.shop

Redirected to: https://www.netflix.shop/en-ck/collections/kpop-demon-hunters?srsltid=AfmBOopMYwvPGOEBcvbfQHmFpBnEsVKZ_qn3b5hVDdApadLbVgpD-H7-

Site favicon
Submitted: Dec 5, 2025, 7:20:03 PMCompleted: Dec 5, 2025, 7:23:26 PMpubliccompleted
Loading additional data...

Summary

This website contacted 119 IPs in 8 countries across 39 domains to perform 647 HTTP transactions. The main domain is netflix.shop and was registered NaN years ago.

Submitted URL: https://www.netflix.shop/collections/kpop-demon-hunters?srsltid=AfmBOopMYwvPGOEBcvbfQHmFpBnEsVKZ_qn3b5hVDdApadLbVgpD-H7-

Effective URL: https://www.netflix.shop/en-ck/collections/kpop-demon-hunters?srsltid=AfmBOopMYwvPGOEBcvbfQHmFpBnEsVKZ_qn3b5hVDdApadLbVgpD-H7-Redirected

The Cisco Umbrella rank of the primary domain is #362,150 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Site mimics Netflix branding on an unrelated domain; high‑risk phishing potential.

Risk Factors
Brand impersonation (Netflix) on a non‑official domain
Low Cisco Umbrella ranking for a site claiming a well‑known brand
Potential trademark infringement and user deception
Domain age information unavailable

Details

Page Title

KPop Demon Hunters Merch Collection | Netflix Shop

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

e-commerce

(38%)

Domain Information

Within the commerce-oriented generic top-level domain (.shop), 'www.netflix.shop' is registered; it also runs on subdomain 'www'. The registrable portion 'netflix' spans 7 characters containing two vowels alongside 5 consonants. Breaking it apart gives 1 word: netflix. Median word length is 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.netflix.shop/collections/kpop-demon-hunters?srsltid=AfmBOopMYwvPGOEBcvbfQHmFpBnEsVKZ_qn3b5hVDdApadLbVgpD-H7-

Page Load Overview

1.91s
Total Load Time
647
HTTP Requests
39
Domains
14.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:16,859 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce38% confidence
Type: webapp
Method: ml+structural

All Detected Categories

e-commerce
38%
malicious
34%
other
32%

Detected Features

Search
OG: product.group

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
42523.227.38.74Ottawa, Ontario, Canada
AS13335CLOUDFLARENET
5757.144.222.128Amsterdam, North Holland, Netherlands
AS32934FACEBOOK
56146.75.122.133Frankfurt am Main, Hesse, Germany
AS54113FASTLY
21104.18.86.42United States
AS13335CLOUDFLARENET
1923.227.39.200Ottawa, Ontario, Canada
AS13335CLOUDFLARENET
16216.198.53.3United States
AS209242Cloudflare London, LLC
13142.251.140.164United States
AS15169GOOGLE
10104.19.148.8United States
AS13335CLOUDFLARENET
9142.250.185.227United States
AS15169GOOGLE
8142.250.184.200United States
AS15169GOOGLE
647119--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T100B4955368B10D3D8A4320DD32517FB5E2E6D48BE383159BBEBD27820F87F949C4A51A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:By/XyExLy3IESsziEiMi/zYib7TAaC7agcQxyJh:By/3yVGAaC7agcQxyJh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:500111:oEYVA7LYhgCYQqgjDhEJlAFAEMwlAEkAxJQICRqcyCgEEqSl4DiQAsINRxpYRDkAlYhkiMKbCCCtKgBGugsBsJBUB1hCAggB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Scan History

Scan history not available

Unable to load historical scan data