netflix-clone-psi-two[.]vercel[.]app

This domain is an active brand impersonation threat designed to steal Netflix account credentials. The site mimics the official Netflix login page, tricking users into entering their email addresses and passwords, which are then harvested by threat actors. Such stolen credentials are often sold on dark web marketplaces or used for further fraud, including unauthorized subscriptions or identity theft. Analysis indicates the domain was registered on March 07, 2026, through Vercel Inc., and is hosted on infrastructure belonging to Amazon.com, Inc. (AS16509). It resolves to the IP address 216.198.79.3 and is flagged by 26 out of 95 security vendors on VirusTotal for malicious activity. The SSL certificate, issued by Google Trust Services, does not mitigate the risk, as the site remains active and unblocked by most security mechanisms. Google Safe Browsing has also classified this domain as phishing. If you or someone you know visited netflix-clone-psi-two.vercel.app and entered login credentials, immediate action is required. First, change the password for the affected Netflix account and enable multi-factor authentication if available. Next, review the account for unauthorized activity, such as unfamiliar profiles or payment methods. Monitor linked email accounts and financial statements for signs of compromise. Finally, report the incident to Netflix support and consider using a reputable password manager to prevent future credential reuse across sites.