Is www.soononnetflix.com safe?

No. MalwareAnalyzer scanned www.soononnetflix.com on 19 Aug 2026 and returned a malicious verdict with a score of 62 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was www.soononnetflix.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.soononnetflix.com - malicious URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned www.soononnetflix.com and returned a malicious verdict (score 62), categorised as phishing. The page resolved to 216.150.16.1 on Vercel, Inc in US. The domain was registered 2635 days ago through Cloudflare, Inc.. 16 domains and 11 IPs were contacted, over 140 HTTP requests. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 62) · Confidence 68%
Scanned URL: https://www.soononnetflix.com/
Domain: www.soononnetflix.com · IP: 216.150.16.1 · AS16509 · US
Server: Vercel
Page title: Soon On Netflix - Information about upcoming tv show season
HTTP status: 200 · text/html; charset=utf-8
Registrar: Cloudflare, Inc. · domain age 2635 days · created 2019-06-02
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Sep 18 13: · subject CN=*.soononnetflix.com
HTTP requests captured: 140 · cookies set: 8 · outgoing links: 28
Scan tier: standard · observed 2026-08-19 23:30:04 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Runtime data beacon to pagead2.googlesyndication.com
Domain impersonates netflix (combosquat)

Detected technologies

Vercel
Next.js
React
Google Analytics

Contacted infrastructure

216.150.16.1 - AS16509 Vercel, Inc (United States)
142.250.207.8 - AS15169 Google LLC (Japan)
142.250.195.162 - AS15169 Google LLC (India)
142.251.42.110 - AS15169 Google LLC (India)
142.250.183.34 - AS15169 Google LLC (India)
142.250.195.225 - AS15169 Google LLC (India)
172.217.25.193 - AS15169 Google LLC (Malaysia)
172.217.25.162 - AS15169 Google LLC (Japan)
142.251.157.119 - AS15169 Google LLC (Netherlands)

Observed indicators

www.soononnetflix.com
www.googletagmanager.com
image.tmdb.org
amzn.to
bit.ly
www.themoviedb.org
rsms.me
securepubads.g.doubleclick.net
www.google-analytics.com
cm.g.doubleclick.net
ceaf5c3258e35af49dbdb95c1b432a8c.safeframe.googlesyndication.com
ep1.adtrafficquality.google
tpc.googlesyndication.com
pagead2.googlesyndication.com
ep2.adtrafficquality.google
www.google.com
216.150.16.1
104.21.58.14
142.250.207.8
142.250.195.162

Questions about www.soononnetflix.com

Is www.soononnetflix.com safe?: No. MalwareAnalyzer scanned www.soononnetflix.com on 19 Aug 2026 and returned a malicious verdict with a score of 62 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was www.soononnetflix.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.soononnetflix.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan