Skip to content
Live
Medium riskfirst seen 2 h ago

cache.netflix.com.sg.al-aziz.web.id

54of 100

Credential phishing, aimed at general public. 96% likely a scam.

Copies NetflixHosted in United States

Why it was flagged

How the score works
  • Name and certificate
  • Registration and DNS
  • VAKYN verdict
  1. legit domain "netflix.com" used as subdomain of "al-aziz.web.id"+33
  2. no mail servers, behind Cloudflare, same IP hosts 50 other flagged domain(s)+15
  3. 4 nested labels+3
  4. registered 1.0 years ago+3

Evidence

Registration

Age
1.0 years old
Registrar
PT JC Indonesia
Status
clientTransferProhibited

Hosting

Country
United States
Network
CLOUDFLARENET
IP
188.114.96.8

DNS

A
188.114.96.8, 188.114.97.8
NS
sneh.ns.cloudflare.com, sterling.ns.cloudflare.com
MX
none

Certificate

Issuer
Google Trust Services
Names
2
Seen
30 Oct 2026 08:26 UTC

VAKYN verdict

414 ms

Eight questions about the site, each with how sure the answer is.

  • Likely used for phishing or a scam?

    yes96% sure

    • yes96%
    • no4%
  • How dangerous for an ordinary visitor?

    Probably malicious49% sure

    • Probably malicious49%
    • Clearly malicious48%
    • Unclear2%
  • What is it most likely for?

    credential phishing52% sure

    • credential phishing52%
    • payment fraud11%
    • unclear11%
  • Which brand does it pretend to be?

    Netflix83% sure

    • netflix83%
    • none17%
  • Who is it aimed at?

    general public70% sure

    • general public70%
    • shoppers9%
    • bank customers5%
  • Would it ask visitors to sign in?

    no82% sure

    • yes18%
    • no82%
  • Would it ask visitors to pay?

    no52% sure

    • yes48%
    • no52%
  • Plausible innocent explanation?

    no98% sure

    • yes2%
    • no98%