Security Scan Report: netflix-clone-iota-two-39.vercel.app

Redirected to:
https://netflix-clone-iota-two-39.vercel.app/login
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 1 country across 4 domains to perform 16 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://netflix-clone-iota-two-39.vercel.app/

Effective URL:
https://netflix-clone-iota-two-39.vercel.app/login
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Netflix-branded login page on a throwaway vercel.app clone subdomain, flagged by Google Safe Browsing for social engineering. It collects email and password for a brand it does not own — do not enter credentials.

Risk Factors (5)
Google Safe Browsing Social Engineering / phishing verdict on the scanned URL
Netflix-branded login form harvesting email and password on a non-Netflix domain
Hosted on a disposable free vercel.app subdomain with unknown creation date
Domain not present in Cisco Umbrella rankings while imitating a major brand
IDS alerts flagging actor-abused cloud hosting service usage
Domain age information unavailable

Details

Page Title

netflix-clone

Scan Type

public

Domain Name Analysis

The domain name 'netflix-clone-iota-two-39.vercel.app' uses the application-focused generic top-level domain (.app) with subdomain 'netflix-clone-iota-two-39'. Count 6 characters in 'vercel' containing two vowels alongside 4 consonants. It segments into two words: ver, cel. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

SI Kj GUIAABE Hi penenter ne Ù New to Netflix? Sign Up

Page Load Overview

1.93s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:76 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media64% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
64%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2216.198.79.131Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
264.29.17.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2142.251.13.95Google · CDNUnited States
AS15169Google LLC
2142.251.20.94Google · CDNUnited States
AS15169Google LLC
299.84.152.8Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2216.198.79.3Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
299.84.152.85Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
299.84.152.53Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
168--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C882BE4078B00E752D2769A903DECB58E22AE0C208DF9D6D7EDF014E4F873A95FA6745

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:FLBDBEZwEPAJBoCW49bEqM8FRQJFvdXeKeO2GdmmtGKHbiRhA7djiwEEh7d4OS+i:FLBDLnt9b5FR+jHTWyf8WlYrH

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18506:QIICQgIEC6ESDcEqRIZAgAPcSQUIyUEjmNEVqAgBLoogusCBpgBlyZEXAAMCukSQhwAhkiEsOIAAJAQgCDdDBZo6VaAIgUEF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:57031a500c7e1267
Perceptual Hash:84bda4c2f24cd15f
Difference Hash:8e2636a0c8e6269c
Wavelet Hash:7f1312702e7e1267
Color Hash:N/A

Other Hashes

Crop Resistant:8e2636a0c8e6269c

Scan History

Scan history not available

Unable to load historical scan data