# netflix-clone-two-sand.vercel.app — MALICIOUS

> netflix-clone-two-sand.vercel.app is a brand impersonation site flagged by OpenPhish with 18/95 VirusTotal detections. Do not enter login credentials.

## Summary
PhishDestroy identifies netflix-clone-two-sand.vercel.app as a credential theft scam impersonating Netflix to steal login details.

This domain was flagged by multiple sources: OpenPhish, Google Safe Browsing (labeled SOCIAL_ENGINEERING), and 18 of 95 VirusTotal security tools. It resolved to IP 216.198.79.67 and used a Google Trust Services SSL certificate. Registered through Vercel Inc., the site mimics Netflix to trick users into submitting usernames and passwords.

If you visited this site, assume your Netflix credentials may be compromised. Change your Netflix password immediately using the official app or website. Enable two-factor authentication and scan your devices for malware. Report suspicious messages claiming to be from Netflix to their support team.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Vercel Inc.
- IP: 216.198.79.67

## Detection Status
- VirusTotal: 18 vendors flagged
- Google Safe Browsing: FLAGGED
- Blocklists: 1 hits
  Lists: ["OpenPhish"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/2a5dceb2-6fb5-4452-8799-7125695c8bd1
- PhishDestroy: https://phishdestroy.io/domain/netflix-clone-two-sand.vercel.app/
- LLM endpoint: https://phishdestroy.io/domain/netflix-clone-two-sand.vercel.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/netflix-clone-two-sand.vercel.app/
Last updated: 2026-03-27