netflix-clone-olive-ten[.]vercel[.]app

This domain, netflix-clone-olive-ten.vercel.app, is identified as a high-risk brand impersonation threat targeting Netflix users. The site presents itself as a functional Netflix clone, likely designed to harvest login credentials, payment details, or personal information from unsuspecting victims. The page title explicitly reads "Netflix Clone," confirming the intent to mimic legitimate Netflix infrastructure. No direct evidence of a crypto drainer kit is present, but the credential harvesting capability alone poses significant financial and privacy risks to affected users. Analysis indicates the domain was registered on March 08, 2026, through Vercel Inc., a platform commonly abused for rapid deployment of phishing pages. The domain resolves to IP address 64.29.17.131, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The SSL certificate is issued by Google Trust Services (WR1), providing a false sense of security to visitors. VirusTotal reports 22 out of 95 security vendors flagging the domain as malicious, while Google Safe Browsing explicitly classifies it as phishing. The domain appears on at least one security blocklist, specifically PhishDestroy, further validating its malicious classification. As of the latest assessment, netflix-clone-olive-ten.vercel.app remains active and accessible, indicating no takedown or mitigation efforts have been successfully enforced. Users who interacted with the domain are advised to immediately reset credentials for Netflix and any associated accounts, particularly if the same password was reused. Financial institutions should be notified if payment details were entered. Organizations are recommended to block the domain and IP at the network level, and monitor for indicators of compromise linked to this infrastructure. The remaining risk is high due to the domain's continued operation and the potential for credential abuse or identity theft.