# netflix-clone-iota-sand.vercel.app — MALICIOUS

> netflix-clone-iota-sand.vercel.app is a crypto drainer impersonating Netflix. 19/95 security vendors flag this domain. Verify safety on PhishDestroy.

## Summary
PhishDestroy identifies netflix-clone-iota-sand.vercel.app as a high-risk fake login scam designed to steal Netflix credentials and drain crypto wallets. This domain is currently active and mimics the official Netflix login page to trick users into entering sensitive information. The threat involves harvesting credentials and cryptocurrency assets through deceptive web forms that closely resemble legitimate Netflix authentication pages. Users who enter their login details risk unauthorized access to their accounts and potential financial loss through connected payment methods or crypto wallets.  This domain was flagged by OpenPhish and 19 out of 95 security vendors on VirusTotal, including Google Safe Browsing, which classifies it as SOCIAL_ENGINEERING. It appears on one security blocklist and resolves to IP 64.29.17.131, hosted on Vercel Inc. The SSL certificate is issued by Google Trust Services, which may lend an air of legitimacy but does not guarantee safety. These indicators collectively confirm the domain's malicious intent and high-risk classification.  To mitigate exposure to this threat, users should avoid clicking links from unsolicited emails or messages and verify URLs before entering login credentials. Always access Netflix directly through the official website or trusted app. If you suspect interaction with this domain, disconnect from the internet, scan your device for malware, and review financial accounts for unauthorized transactions. Report the domain to PhishDestroy for further analysis and community protection. Do not reuse passwords across services to minimize potential credential stuffing attacks.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Vercel Inc.
- IP: 64.29.17.131

## Detection Status
- VirusTotal: 19 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 1 hits
  Lists: ["OpenPhish"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/b974bfb6-8995-4792-bec6-9b31da4f671f
- PhishDestroy: https://phishdestroy.io/domain/netflix-clone-iota-sand.vercel.app/
- LLM endpoint: https://phishdestroy.io/domain/netflix-clone-iota-sand.vercel.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/netflix-clone-iota-sand.vercel.app/
Last updated: 2026-03-27