# netflix-clone-coral-three.vercel.app — SUSPICIOUS

> PhishDestroy identifies netflix-clone-coral-three.vercel.app as a Netflix credential phishing site with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies netflix-clone-coral-three.vercel.app as a Netflix credential phishing site claiming to be a streaming service clone. This domain mimics the official Netflix login interface to trick users into entering their email and password, which are then harvested by attackers. The page requests payment details shortly after login, increasing the risk of financial fraud. Users who enter credentials risk account takeover and potential unauthorized charges.

This domain was flagged on October 12, 2024, by PhishDestroy’s real-time crawlers. It resolves to IP 216.198.79.131 and uses a Google Trust Services SSL certificate, increasing its appearance of legitimacy. It was registered through Vercel Inc. and has not yet been detected by security engines, with 0 out of 95 VirusTotal scanners identifying it as malicious. The site was created within the last 48 hours and is actively hosted on Vercel’s serverless platform.

If you visited this site, stop using any credentials you entered immediately. Change your Netflix password and enable two-factor authentication. Check your account for unauthorized devices and review recent payment activity. Consider using a password manager to avoid typosquatting traps. Report suspicious activity to Netflix support and run a full antivirus scan. Avoid clicking links in emails or messages claiming to offer free Netflix services.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Vercel Inc.
- IP: 216.198.79.131

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/netflix-clone-coral-three.vercel.app
- PhishDestroy: https://phishdestroy.io/domain/netflix-clone-coral-three.vercel.app/
- LLM endpoint: https://phishdestroy.io/domain/netflix-clone-coral-three.vercel.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/netflix-clone-coral-three.vercel.app/
Last updated: 2026-04-07