netflix-frontend-clone-gamma[.]vercel[.]app

This domain poses as a legitimate service to harvest Apple account credentials through a deceptive login interface. Visitors are presented with a page titled 'Netflix Frontend Clone,' which closely mimics Apple’s authentication flow, tricking users into entering sensitive information such as usernames, passwords, and payment details. The site exploits trusted branding to lower user defenses, increasing the likelihood of successful credential theft. Analysis indicates the domain was registered on February 21, 2026, through Tucows Domains Inc., an unusual timeline suggesting potential domain spoofing or preemptive registration for malicious use. It resolves to IP address 64.29.17.131, hosted on infrastructure belonging to Amazon.com, Inc. (AS16509). Detection systems report 22 out of 95 security vendors flagging the domain as malicious, while Google Safe Browsing and one additional security blocklist have also classified it as phishing. The SSL certificate, issued by Google Trust Services, further masks the site’s true intent by presenting a seemingly secure connection. If you visited netflix-frontend-clone-gamma.vercel.app and entered any credentials or personal information, immediately change your Apple ID password and enable multi-factor authentication. Review recent account activity for unauthorized access or transactions. Clear browser cache and cookies to remove any stored session data. Monitor financial statements for signs of fraudulent activity, and consider reporting the incident to relevant fraud protection services. Avoid interacting with the domain or any links associated with it, as it remains active and continues to pose a risk.