next-netflix-19th-nu[.]vercel[.]app

This domain, next-netflix-19th-nu.vercel.app, is flagged as a credential harvesting site specifically designed to impersonate Netflix. Analysis indicates the page mimics legitimate Netflix login interfaces to deceive users into submitting account credentials, payment details, or personal information. The threat primarily targets streaming service subscribers through phishing campaigns, likely distributed via email or social engineering vectors. Infrastructure analysis reveals multiple technical indicators supporting this assessment. The domain was registered on January 28, 2020, through Vercel Inc., and resolves to IP 64.29.17.3 hosted on Amazon.com, Inc. (AS16509). Security vendors on VirusTotal flagged the domain with 19/95 detections, while one security blocklist has already listed it. The SSL certificate, issued by Google Trust Services (WR1), and the page title 'Netflix' further confirm the attempt to replicate the official Netflix brand. Users who visited next-netflix-19th-nu.vercel.app should immediately revoke any entered credentials by changing their Netflix password. Enable multi-factor authentication on the account if not already active. Monitor linked financial instruments for unauthorized transactions, as stolen credentials may be used for fraudulent purchases. Clear browser cache and cookies to remove any residual session data. Report the incident to the impersonated brand's security team for further investigation. If payment details were submitted, contact financial institutions to issue new cards and dispute unauthorized charges.