# netflix-phi-nine.vercel.app — MALICIOUS

> Netflix-phi-nine.vercel.app impersonates Netflix with high-risk phishing tactics. Now offline, learn why it was flagged and how to stay safe.

## Summary
PhishDestroy identifies netflix-phi-nine.vercel.app as a high-risk brand impersonation phishing domain targeting Netflix users. The threat posed by this domain was significant due to its attempt to deceive victims into believing they were interacting with the legitimate Netflix service.

This domain resolved to IP 216.198.79.195 and was registered through Vercel Inc. It was created recently on March 6, 2026, and was flagged on one security blocklist. VirusTotal analysis showed 23 out of 95 vendors detected malicious activity, reinforcing its phishing nature.

Currently, netflix-phi-nine.vercel.app is offline, mitigating immediate threat. Users are advised to remain vigilant against suspicious Netflix-related URLs. PhishDestroy recommends verifying URLs carefully and utilizing updated security tools to avoid similar impersonation scams.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP ?)
- Target brand: Netflix
- Page title: Netflix

## Domain Intelligence
- Registered: 2026-03-06 13:07:01
- Registrar: Vercel Inc.
- Country: US
- IP: 216.198.79.195
- IP Country: US
- IP City: Walnut
- IP Org: AS16509 Amazon.com, Inc.
- Nameservers: NS_NOT_FOUND
- SSL Issuer: Google Trust Services / WR1

## Detection Status
- VirusTotal: 23 vendors flagged
  Vendors: ["ADMINUSLabs", "Criminal IP", "alphaMountain.ai", "BitDefender", "Chong Lua Dao", "CyRadar", "Ermes", "ESET", "Emsisoft", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Gridinsoft", "Kaspersky", "Lionic", "MalwareURL", "Mimecast", "Netcraft", "Sophos", "Trustwave", "URLQuery", "VIPRE", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cc31c-7107-721b-83d3-fb012381b7df.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/netflix-phi-nine.vercel.app
- Wayback Machine: https://web.archive.org/web/https://netflix-phi-nine.vercel.app
- PhishDestroy: https://phishdestroy.io/domain/netflix-phi-nine.vercel.app/
- LLM endpoint: https://phishdestroy.io/domain/netflix-phi-nine.vercel.app/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/netflix-phi-nine.vercel.app/
Last updated: 2026-03-19