Security Scan Report: netfix-clone.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 4 domains to perform 8 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://netfix-clone.vercel.app/pages/sign-up.html

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Typosquatted vercel.app clone presenting itself as Netflix and collecting passwords via a sign-up form; flagged by Safe Browsing for social engineering and reported as phishing. Do not enter credentials.

Risk Factors (5)
Typosquatted hostname impersonating Netflix
Credential collection form (password + email/phone) on a non-official brand domain
Google Safe Browsing social engineering detection
Threat-intel phishing reports against the domain and its sign-in URL
Unranked hosting-platform subdomain with unknown age; IDS noted abused cloud hosting service (vercel.app) usage
Domain age information unavailable

Details

Page Title

Netflix India - Watch TV Shows Online, Watch Movies Online

Scan Type

public

Domain Name Analysis

The domain name 'netfix-clone.vercel.app' uses the application-focused generic top-level domain (.app) and includes subdomain 'netfix-clone'. Count 6 characters in 'vercel' containing 2 vowels alongside four consonants. Tokenizing the label suggests two words: ver, cel. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://netfix-clone.vercel.app/pages/sign-up.html

Page Load Overview

0.30s
Total Load Time
151 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:400 chars
Detector Agreement:90%

Website Classification

Primary Category

entertainment media90% confidence
Type: webapp
Method: ml+structural

All Detected Categories

entertainment media
90%
corporate business
61%
social_media
25%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
464.29.17.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
178.46.22.25Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.26.4.108Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0104.26.5.108Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0216.198.79.195Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
0172.67.75.130Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
89--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D181AB1150F1055B13C3CA913AF1FA3BBEC28547D78A39047AAC0B9A9F93E828F6755D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:nJOCdDf4vo3wI4aNrbXdnuHH4ztqHH4ztyN9IENuJHH4zgpHFGq/2+n/qbenNv58:nJxT4AfdnuHzH7Hz6HHpHFJ281CNvj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4178:AEKIAAQwAIAAQJ4aQAEAbIDACKACQGACEEAwFBBQAAAwIgCYAQEsAgKQIAoQEEEgdAgQABECDAAEkIEIYQAAQYQkMQACANgA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e826fff8c141003d
Perceptual Hash:e9f51f70ca4ca930
Difference Hash:195456d5999b9951
Wavelet Hash:f926fff8c14000bd
Color Hash:39400008000

Other Hashes

Crop Resistant:195456d5999b9951

Scan History

Scan history not available

Unable to load historical scan data