Security Scan Report: nutflixcnm.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 7 domains to perform 46 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://nutflixcnm.netlify.app/

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

A fake Netflix sign-in and subscription page on a free netlify.app subdomain, using Netflix branding to harvest emails and passwords and push a €3.00 'Revolut' payment. Do not enter credentials or pay.

Risk Factors (5)
Impersonation of the Netflix brand on a netlify.app subdomain that is not Netflix's official domain
Credential-harvesting form: password field and email fields presented as a Netflix 'Sign In' / membership restart
Unranked, free-hosting subdomain with unknown age being used to front a household-name brand
Suspiciously low subscription price (€3.00) paired with a third-party 'Revolut Pay' checkout, a common lure in streaming phishing scams
Inline scripts use encoding/decoding functions on a page whose only purpose is login/payment collection
Domain age information unavailable

Details

Page Title

Netflix

Scan Type

public

Domain Name Analysis

Domain 'nutflixcnm.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain 'nutflixcnm'. The core label 'netlify' covers 7 characters split between two vowels and five consonants. Segmentation suggests 3 words: net, li, fy. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nutflixcnm.netlify.app/

Page Load Overview

1.89s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:6,723 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media41% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
663.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
4142.250.154.113Google · CDNUnited States
AS15169Google LLC
4192.178.183.94Google · CDNUnited States
AS15169Google LLC
499.84.152.32Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4138.199.37.229Datacamp · CDNFrankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
435.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
4142.250.154.100Google · CDNUnited States
AS15169Google LLC
499.84.152.85Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
4142.251.151.119Google · CDNUnited States
AS15169Google LLC
4611--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A144C6B365B710266813A4EA7BE7574A3230D003E646CA287FDD52984FC6ED4D9B378C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:iDAIJoorw7Jtw71UT/NUpxP7ZuJOVz0v/Fj3n1znhQK+Uuu7g3gG7Tu7uzhCnHc:4McxPtuQVzs/nMu7gQG7C7/nHc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:271484:SFmTBD0EAAoIINPGhkCHsCLBYSAHBgKCRgMGICBUUlBuIZIUQwDDxBRNJw3IQTouyQwVCICQwBi6Jgl7CAY4AEDujIkgDmfF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c1c0c0000ffff
Perceptual Hash:991aac6623f76a8c
Difference Hash:1df0f0d898206282
Wavelet Hash:0d3e3e0c0080ffff
Color Hash:#d22d9b

Other Hashes

Crop Resistant:1df0f0d898206282

Scan History

Scan history not available

Unable to load historical scan data