Security Scan Report: netflixbilling.com

Redirected to:
https://netflixbilling.com/
Site favicon
Submitted: Sep 27, 2026, 11:13:25 PMCompleted: Sep 27, 2026, 11:16:56 PMpubliccompleted

This website contacted 11 IPs in 3 countries across 3 domains to perform 3 HTTP transactions. The main domain is netflixbilling.com and was registered 15 years ago.

Submitted URL: http://netflixbilling.com

Effective URL:

https://netflixbilling.com/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 88%

5
Risk Score

netflixbilling.com impersonates Netflix, serving a Netflix-branded sign-in page (email/password) on a non-official, unranked domain - a credential-phishing trap. Avoid entering any login details.

Risk Factors (4)
Impersonation of Netflix (a different entity's brand) on a non-official domain
Netflix-branded credential entry page on a typosquat-style hostname (netflixbilling.com)
Unranked domain presenting itself as a major brand
Page title reflects a broken/error backend ('502 Bad Gateway') typical of hastily deployed phishing infrastructure
Safety Factors (4)
Domain is well established (registered 2012, ~14 years old) - likely hijacked/repurposed rather than newly created
No JavaScript YARA malware patterns detected
No network IDS alerts and no Indicators of Compromise matches
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 9 to 5
Domain age information unavailable

Details

Page Title

Netflixother network

Scan Type

public

Domain Name Analysis

The domain name 'netflixbilling.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'netflixbilling' covers 14 characters containing 4 vowels alongside ten consonants. Segmentation suggests 2 words: netflix, billing. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://netflixbilling.com

Page Load Overview

0.54s
Total Load Time
0 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:362 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media85% confidence
Type: webapp
Method: ml+structural

All Detected Categories

entertainment media
85%
e-commerce shopping
68%
technology software
29%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3207.45.73.1United States
AS40027Netflix Streaming Services Inc.
050.17.247.9Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
045.57.90.1United States
AS40027Netflix Streaming Services Inc.
045.57.91.1United States
AS40027Netflix Streaming Services Inc.
034.242.48.77Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
045.57.0.146Netflix · CDNLondon, England, United Kingdom
AS2906Netflix Streaming Services Inc.
0104.18.32.137Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.156.119Google · CDNUnited States
AS15169Google LLC
0142.251.127.94Google · CDNUnited States
AS15169Google LLC
0172.64.155.231Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
311--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T186D4D65BA8500A3DE6C34AED799569097520A82BEE7D1DCCFECC4A7417CEBE77102348

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:DbLvr4Trt3/d6tMK+DLjQnMVWHShUKCHTge61:Db3grt3/YF+DLMnMVWHS+VXG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:631162:oSDUITAJBEaYjEIwGO1YgFJTCAoCTMAnlEqcOKYBI5glBfBiAANwAnBBoARwIFsAXmhCSjGAIMABOFMkyg1GMBGBRHHIsAiF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff000000000000
Perceptual Hash:849595736b6a6a6a
Difference Hash:b2e231e1514141c1
Wavelet Hash:ffff3911010001ff
Color Hash:#583a78

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data