netflix-gpt-jack[.]vercel[.]app

The domain netflix-gpt-jack.vercel.app was registered on 21 February 2026 through Tucows Domains Inc. and resolves to the IP address 64.29.17.67, which is allocated to Amazon.com, Inc. (AS16509) in the United States. Hosting is provided by Vercel, and the site presents an HSTS header, indicating that HTTPS is enforced. The TLS certificate is issued by Google Trust Services under the WR1 label, a standard certificate for Vercel‑hosted services. HTTP requests return status code 451 (Unavailable for legal reasons), and the only visible page title is "Deployment Unavailable".

Google Safe Browsing flags the domain for social‑engineering, and it appears on the PhishDestroy blocklist as well as at least one other security blocklist. VirusTotal analysis shows 16 of 93 scanning engines have flagged the domain, reinforcing the suspicion of malicious intent. The intelligence explicitly states that the domain impersonates the Netflix brand. No live content has been captured because the site is currently offline, and no sample of a credential‑capture page or malicious payload is available, leaving the exact phishing workflow unverified.

Despite the lack of current content, the convergence of brand impersonation, social‑engineering rating, blocklist listings, and multiple vendor detections justifies a high‑risk classification. Defenders should block the domain at DNS, firewall, and web‑proxy layers, deny traffic to the associated IP address, and add the domain to internal threat‑intel feeds. Continuous monitoring of Vercel‑related abuse reports and periodic re‑scanning are advised to detect any future redeployment or changes in the hosting configuration.