netflix-clone-five-lyart-84[.]vercel[.]app

The domain netflix-clone-five-lyart-84.vercel.app has been identified as a confirmed phishing site specifically targeting Netflix users. Currently active and accessible, this domain impersonates Netflix to steal login credentials and personal information from unsuspecting visitors. The threat type is generic phishing, but the clear brand impersonation elevates the risk level to high, warranting immediate attention from users and security teams.

According to intelligence data, this domain was registered through Vercel Inc. and is hosted on IP address 216.198.79.195. It employs an SSL certificate issued by Google Trust Services (WR1), which gives the site an appearance of legitimacy. However, security analysis reveals that 21 out of 95 VirusTotal security vendors flag this domain as malicious, and it currently appears on 1 security blocklist. Despite the low blocklist count, the high number of vendor flags indicates strong consensus among security tools about the threat. The page title explicitly reads 'Netflix Clone,' which serves as a clear warning of its fraudulent intent.

As of now, the site remains active, posing an ongoing risk to anyone who visits it. Users are strongly advised to avoid entering any personal information on this site and to refrain from clicking any links associated with it. If you have already interacted with the site, change your Netflix password immediately and monitor your accounts for suspicious activity. PhishDestroy recommends blocking the domain at the network level and reporting it to Google Safe Browsing and other security platforms to protect other potential victims.