ui-clone-faraz.vercel.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ui-clone-faraz.vercel.app
This domain appears to host a cloned or imitation landing page styled to resemble the Netflix streaming service. The screenshot shows Netflix branding, promotional imagery, and a sign-up prompt asking visitors to enter an email address to start or restart a membership, while the page title is the generic-looking "D0cument." The domain itself is a subdomain on Vercel rather than an official Netflix-owned domain, which suggests it may be a user-deployed project rather than an authorized corporate website.
Based on the visible content and linked assets, the page appears to reuse media and branding associated with Netflix, including references to Netflix-related asset domains. The name "ui-clone-faraz" also suggests the site may have been created as a user interface clone or replica. There is no clear evidence in the provided scan data identifying the operator as Netflix, and the hosting setup indicates it is served through a third-party deployment platform.
Safety Assessment for ui-clone-faraz.vercel.app
This website raises substantial concerns based on the available scan data. It was flagged by 15 out of 91 security engines, with multiple detections describing the page as phishing or otherwise malicious at the time of the scan. In addition, it was listed by a major threat-database provider for social-engineering activity, which is a stronger signal than a generic heuristic alert. The page visually resembles Netflix and uses similar branding and imagery while operating from an unrelated Vercel subdomain, which may indicate an attempt to imitate a well-known service.
The malware scan did not detect malicious files in the small set of scanned resources, and no flagged external links or iframes were reported in that particular scan. However, a clean file scan does not outweigh the broader reputation signals when multiple security engines and a content-focused threat database independently identify phishing-related concerns. The domain's IP address is also listed on one mail-reputation blocklist, which is a secondary cautionary signal but not the main reason for concern here.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted on Vercel infrastructure and resolves to IP address 216.198.79.195 in the United States. It presents a valid SSL/TLS certificate issued by Google Trust Services, with expiry in September 2026. The presence of HTTPS indicates encrypted transport, but that alone does not establish legitimacy. DNSSEC appears to be unsigned, which means DNS responses may not benefit from that additional integrity layer.
From a technical perspective, the page appears lightweight, with only a few scanned files and no detected iframes. Even so, the combination of third-party hosting, a generic page title, and branding that appears to imitate a major streaming platform may be consistent with a phishing setup or deceptive clone page.
Share your experience with this website. Was it safe? Did you encounter any issues?