netflix-clone-psi-seven[.]vercel[.]app

The domain netflix-clone-psi-seven.vercel.app is currently active and poses a significant threat, with 20 out of 94 VirusTotal vendors identifying it as malicious. This domain is particularly deceptive as it impersonates the well-known cryptocurrency exchange Kraken, alongside brands like Near and Netflix. The scam is hosted on Vercel Inc.'s platform and uses an IP address managed by Amazon.com, Inc., located in the United States.

This phishing operation targets cryptocurrency users, leveraging the trust associated with Kraken to deceive victims into divulging sensitive information or transferring funds. The domain's page title, "Netflix Clone App," is misleading, potentially designed to confuse users and obscure its true malicious intent. Despite its misleading title, the platform risk score is alarmingly high at 93 out of 100, indicating a sophisticated scam setup.

The SSL certificate for this domain is issued by Google Trust Services, which adds a layer of perceived legitimacy to the unsuspecting user. However, the presence of this domain on PhishDestroy's blocklist underscores its malicious nature. The domain was created and detected by PhishDestroy on March 3, 2026, suggesting it is a fresh threat, exploiting the gap before antivirus databases update. As the domain remains active, it is crucial for users to be aware of the potential risks associated with interactions on this site.