# PhishDestroy domain threat record: my-account-netfilx.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/my-account-netfilx.com/ Machine-readable companion: https://phishdestroy.io/domain/my-account-netfilx.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-22 13:19:22 UTC - Last availability or vendor check: 2026-10-22 13:19:22 UTC - Stored record updated: 2026-10-22 16:30:27 UTC - VirusTotal detections in the stored snapshot: 0/92 - Independent public blocklist matches in the stored snapshot: 1 - Matching public blocklists: OpenPhish - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: Netflix ## Stored infrastructure - Observed IP address: 45.74.61.8 - Registrar in stored WHOIS data: Global Domain Group LLC - Last stored HTTP status: 200 - Registration date (registry RDAP, my-account-netfilx.com): 2026-08-03 06:19:37 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a163c2-d275-771f-9234-efa2c199e163/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/my-account-netfilx.com - Certificate Transparency search: https://crt.sh/?q=%25.my-account-netfilx.com - Web Archive lookup: https://web.archive.org/web/*/https://my-account-netfilx.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy’s intake AI classified the domain as malicious because the name misspells Netflix and the reported page title and text reference the brand, suggesting credential‑phishing. The domain first appeared in PhishDestroy’s records on 2026-10-22 and returned an HTTP 200 response at that time. No page content was captured, so the assessment relies on the reported brand references rather than observed page elements. How the scam works Typical Netflix phishing sites present a counterfeit login form that mimics the official interface, prompting victims to enter their email and password. Harvested credentials can be used to hijack accounts, request password resets, or be sold on underground markets. Evidence VirusTotal scanned the domain on 2026-10-22 with 92 engines and recorded zero malicious or suspicious detections. Google Safe Browsing also returned a clean result on the same date. OTX listed three pulses mentioning the domain on 2026-10-22, but none indicated confirmed compromise. URLScan captured two snapshots on 2026-10-22: the first received a clean verdict, while the second was flagged by its machine‑learning engine as malicious (score 80) yet the overall verdict remained non‑malicious. PhishDestroy’s internal blocklist marks the domain as malicious, and no external blocklists reported it. Infrastructure The domain was registered with Global Domain Group LLC on 2026-08-03, giving it an age of 80 days at first sight. It was recorded pointing to IP 45.74.61.8, which belongs to 69HOST LLC in the United States. TLS was provided by a Let’s Encrypt certificate valid until 2026-12-31, and the server identified itself as Apache running PHP 8.3.36. What to do Anyone who may have entered Netflix credentials on this site should change their Netflix password immediately and enable two‑factor authentication. Defenders should add the domain to internal phishing blocklists and monitor network logs for connections to 45.74.61.8. Blocking the exact domain at the perimeter helps prevent further credential harvesting. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a163c2-d275-771f-9234-efa2c199e163/ Cloudflare Radar report: https://radar.cloudflare.com/scan/ed0ffc31-6797-4d88-9346-160a622c7f08 URLQuery report: https://urlquery.net/report/6c8661c9-3b62-4a6f-9ea8-27513a54b412 Stored capture screenshot: https://i.ibb.co/3ygQQvqM/539738657e10.png Cloudflare Radar screenshot (2026-10-22T13:56:50Z): https://screenshots.phishdestroy.io/cf/ed0ffc31-6797-4d88-9346-160a622c7f08.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/6c8661c9-3b62-4a6f-9ea8-27513a54b412.png URLScan screenshot (2026-10-22T13:06:21Z): https://screenshots.phishdestroy.io/us/01a163b8-1dfe-7341-aea5-38a0a25c61bc.png URLScan capture report: https://urlscan.io/result/01a163b8-1dfe-7341-aea5-38a0a25c61bc/ VirusTotal report: https://www.virustotal.com/gui/domain/my-account-netfilx.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=my-account-netfilx.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 14:00:13 UTC ## Stored page captures - Primary capture: https://i.ibb.co/3ygQQvqM/539738657e10.png Captured: 2026-10-22 13:19:22 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a163c2-d275-771f-9234-efa2c199e163.png Captured: 2026-10-22 13:19:22 UTC Source report: https://urlscan.io/result/01a163c2-d275-771f-9234-efa2c199e163/ - URLScan capture 2: https://urlscan.io/screenshots/01a163b8-1dfe-7341-aea5-38a0a25c61bc.png Captured: 2026-10-22 13:11:57 UTC Source report: https://urlscan.io/result/01a163c2-d275-771f-9234-efa2c199e163/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/ed0ffc31-6797-4d88-9346-160a622c7f08.png Captured: 2026-10-22 13:56:50 UTC Source report: https://radar.cloudflare.com/scan/ed0ffc31-6797-4d88-9346-160a622c7f08 SHA-256: 5d06ac1ac6a4169262bebde7a4d9961a4b654adf1bfd0c6d6e3a6ca6234411a2 - URLQuery: https://screenshots.phishdestroy.io/uq/6c8661c9-3b62-4a6f-9ea8-27513a54b412.png Source report: https://urlquery.net/report/6c8661c9-3b62-4a6f-9ea8-27513a54b412 SHA-256: 367ab48f32738c2b5efd3d10f8b2889545dd99bb073a95e1ab9b432160fa0af8 - URLScan · 2026-10-22: https://screenshots.phishdestroy.io/us/01a163b8-1dfe-7341-aea5-38a0a25c61bc.png Captured: 2026-10-22 13:06:21 UTC Source report: https://urlscan.io/result/01a163b8-1dfe-7341-aea5-38a0a25c61bc/ SHA-256: 6a0bda1b02ce2f360aab9d0455394dfb47481cb2fcc57480fc780bbb99d7a73f ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T13:59:25Z", "uuid": "01a163c2-d275-771f-9234-efa2c199e163", "scanned_at": "2026-10-22T13:18:00Z", "final_url": "https://my-account-netfilx.com/pages/info.php", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://my-account-netfilx.com/pages/info.php", "from": "http://my-account-netfilx.com/pages/info.php", "status": 307 } ], "ip": "45.74.61.8", "domains": [ "cdnjs.cloudflare.com", "ajax.googleapis.com", "fonts.googleapis.com" ], "ips": [ "104.17.25.14", "142.251.13.95", "192.178.183.95", "45.74.61.8" ], "asns": [ "13335", "15169", "205397" ], "countries": [ "US" ], "doc_hash": "12e80c6c182176bfe3846854b88d01b7c3491499b26d596c1a984dc3e58f6e0a", "globals": [ "$", "jQuery", "$jscomp" ], "cookies": [ "PHPSESSID" ], "tls": { "san": [ "my-account-netfilx.com", "www.my-account-netfilx.com" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "my-account-netfilx.com", "protocol": "TLS 1.3", "valid_to": "2026-12-31T05:09:34Z", "valid_from": "2026-10-02T05:09:35Z" }, "domain_age_days": 80, "apex_age_days": 80, "tls_age_days": 20, "tls_valid_days": 89, "requests": 7, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 80, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Apache", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.3.36\nPleskLin" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T13:59:27Z", "uuid": "ed0ffc31-6797-4d88-9346-160a622c7f08", "scanned_at": "2026-10-22T13:56:50Z", "final_url": "https://my-account-netfilx.com/pages/", "status": 200, "history": [ { "url": "https://my-account-netfilx.com/", "status": 200 }, { "url": "https://my-account-netfilx.com/pages/", "status": 200 } ], "dom_hash": "a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e", "doc_hash": "9e5ca212eeceadb470796e263ac74e6138487c95006a626eb1b389ec0d0c209f", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "my-account-netfilx.com", "type": "A", "value": "45.74.61.8" } ], "dnssec_valid": false, "ip": "45.74.61.8", "whois": { "registrar": "Global Domain Group LLC", "created": "2026-08-03T06:19:37Z", "updated": "2026-08-03T06:19:38Z", "expires": "2027-08-03T06:19:37Z", "nameservers": [ "ns1.69host.cc", "ns2.69host.cc" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T13:56:07Z", "analysis_at": "2026-10-22T13:28:55Z", "stats": { "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }, "reputation": 0, "registrar": "Global Domain Group LLC", "created": "2026-08-03T06:19:37Z", "expires": "2027-08-03T06:19:37Z", "updated": "2026-08-03T06:19:38Z", "first_seen": "2026-08-03T06:42:47Z", "dns": [ { "ttl": 180, "type": "A", "value": "45.74.61.8" }, { "ttl": 180, "type": "NS", "value": "ns2.69host.cc" }, { "ttl": 180, "type": "NS", "value": "ns1.69host.cc" }, { "ttl": 180, "type": "SOA", "rname": "admin.69host.cc", "value": "ns1.69host.cc" } ], "dns_at": "2026-10-22T13:34:37Z", "jarm": "29d3fd00029d29d00042d43d0000001b0c486b0c0bae33c7ce67177fe8bab5", "cert": { "san": [ "my-account-netfilx.com", "www.my-account-netfilx.com" ], "issuer": "Let's Encrypt / YR1", "serial": "542de5bc2c2cef6c0055faebd5b530f770c", "sha256": "dd38da7508fba53057495ab120d214e9064a4ff28779cbe4852c35cd239c267d", "subject": "my-account-netfilx.com", "valid_to": "2026-12-31T05:09:34Z", "valid_from": "2026-10-02T05:09:35Z" }, "whois": { "registrar": "Global Domain Group LLC", "registrar_iana_id": "3956", "registrar_url": "http://www.globaldomaingroup.com", "created": "2026-08-03T06:19:37Z", "updated": "2026-08-03T06:19:38Z", "expires": "2027-08-03T06:19:37Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.69host.cc", "ns2.69host.cc" ], "dnssec": "unsigned" }, "rdap": { "status": [ "transfer prohibited" ], "events": { "expiration": "2027-08-03T06:19:37Z", "last changed": "2026-08-03T06:19:41Z", "registration": "2026-08-03T06:19:37Z", "registrar expiration": "2027-08-03T06:19:37Z", "last update of RDAP database": "2026-10-21T17:42:05Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T13:56:48Z", "mail_config": { "spf_lookups": 0 }, "caa_records": { "domain": "my-account-netfilx.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2026-10-22T13:17:38Z", "first": "2026-10-22T13:17:38Z", "changes": 0, "days_archived": 1, "avg_page_bytes": 1606 }, "trackers": { "requests": 1 }, "mixed_content": { "third_party_scripts": 0 }, "status": { "up": true, "code": 200, "timings": { "dns": 41, "tls": 21, "wait": 23, "connect": 57, "download": 0 }, "response_ms": 142 }, "tls_connection": { "alpn": "http/1.1", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 25, 53, 80, 443 ] }, "carbon": { "bytes": 2030, "co2_grams": 0.0001, "cleaner_than": 95 }, "dns_server": { "ns": [ { "ip": "5.255.125.243", "host": "ns1.69host.cc" }, { "ip": "95.169.204.90", "host": "ns2.69host.cc" } ], "zone": "my-account-netfilx.com" }, "cookies": { "cookies": [ { "name": "PHPSESSID", "session": true } ] }, "location": { "ip": "45.74.61.8", "asn": "205397", "org": "69HOST LLC", "country": "US" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "my-account-netfilx.com" }, "dns": { "A": [ "45.74.61.8" ], "NS": [ "ns2.69host.cc", "ns1.69host.cc" ], "SOA": "{\"nsname\": \"ns1.69host.cc\", \"hostmaster\": \"admin.69host.cc\", \"serial\": 2026080302, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 3600}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "45.74.61.8", "family": 4 }, "redirects": { "chain": [ "https://my-account-netfilx.com" ] }, "tech_stack": { "technologies": [ "PHP", "Apache HTTP Server" ] }, "whois": { "registrar": "Global Domain Group LLC", "created": "2026-08-03T06:19:37Z", "updated": "2026-08-03T06:19:38Z", "expires": "2027-08-03T06:19:37Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "ns1.69host.cc", "ns2.69host.cc" ] }, "headers": { "headers": { "server": "Apache", "content-type": "text/html; charset=UTF-8", "x-powered-by": "PHP/8.3.36, PleskLin" } } } } ```