occ-0-1106-300.1.nflxso.net isn't the kind of site you browse or buy from. It's a subdomain under Netflix's domain (nflxso.net), but it's hosted on a British home broadband network (Sky) rather than Netflix's usual infrastructure. That mismatch matters: legitimate Netflix content servers live on their own CDN or cloud providers, not a residential ISP. The site also returned a 422 error when tested, which means the server is misconfigured or refusing connections. Combined with expired TLS drafts still being accepted and no security headers, this looks less like a real Netflix server and more like a misdirected subdomain or a tunnel for something else. If you came across occ-0-1106-300.1.nflxso.net in a link or app configuration, don't assume it's official Netflix hardware. Treat it as untrusted until verified through official Netflix channels. There's no legitimate reason a regular user would need to interact with this address directly.
No — occ-0-1106-300.1.nflxso.net doesn't look safe
In plain English
This isn't a normal website you'd visit or buy from. It's a subdomain resolved by Netflix's domain but hosted on a residential broadband provider in the UK, returning a 422 error — that's a red flag for potential tunneling or impersonation. Do not enter any personal data or payment info here, and don't treat it as a legitimate Netflix server.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
Mixed picture: a valid certificate with modern TLS 1.3 is undercut by the site accepting outdated TLS 1.0 and 1.1, plus missing browser protections that block clickjacking and enforce encrypted connections. The certificate expires in under two weeks, which suggests lax maintenance.
The domain isn't registered as a standard web address — it's a subdomain under nflxso.net, which is owned by Netflix. That alone isn't concerning, but the WHOIS returns no match, meaning this isn't a standalone domain you can check ownership for.
Clean on DNS blacklists and Google Web Risk, which is reassuring. The site isn't in the top million most visited, but that's normal for a technical subdomain. No web archive history was retrievable, so we can't confirm its past.
No about page, no contact info, no social media presence, and no favicon. For a consumer-facing site this would be a red flag, but given the domain pattern this appears to be a backend server, not a business you'd contact.
No privacy policy or terms of service found. If this were a commercial site selling something, that would be a serious gap. But this looks like a content delivery or streaming server — legal pages aren't standard for infrastructure endpoints.
Hosted on a UK broadband provider's network (Sky), which is unusual for a major streaming service — Netflix typically uses dedicated CDN partners. No email handling, no security headers, and the server returned a 422 error, which suggests a configuration issue.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.