netflix-clone-zeta-five[.]vercel[.]app

Analysis of netflix-clone-zeta-five.vercel.app shows a newly registered site (created June 12, 2026) that returns HTTP 200 and presents a valid SSL certificate issued by Google Trust Services under the WR1 profile. The page title "Home - Netflix" and the declared brand target Netflix indicate a deliberate brand‑impersonation attempt. Infrastructure inspection reveals the host resolves to 216.198.79.131, an IP owned by Vercel, Inc. in the United States. Detected technologies include Node.js, React, Next.js, Webpack, and HSTS, consistent with a modern JavaScript stack typical of Vercel deployments. The domain appears on one security blocklist and is actively blocked by PhishDestroy. Gridinsoft assigns a trust score of 0 / 100, and VirusTotal reports 20 of 91 scanning engines flagging the domain as malicious. Nameserver information is unavailable. The site remains active despite the blocklist presence. Defenders should add the domain to URL filtering and DNS block policies, monitor outbound connections to the associated IP, and consider extending threat‑intel feeds that reference this indicator. Continuous re‑evaluation is advised, as the lack of nameserver data and the relatively recent registration suggest the infrastructure could evolve or relocate.