netflix-clone-beige-ten[.]vercel[.]app

The domain netflix-clone-beige-ten.vercel.app is an active brand impersonation threat targeting Apple users. Despite its page title reading "Netflix Website Clone," the site is designed to mimic Apple's login interface, likely to harvest credentials. This phishing campaign was registered through Tucows Domains Inc. and resolved at IP 216.198.79.3, with a creation date of February 21, 2026. The SSL certificate is issued by Google Trust Services / WR1, adding a false sense of security.

Technical indicators are severe: VirusTotal reports 23 out of 95 security vendors flagging this domain as malicious. Google Safe Browsing explicitly marks it as phishing, and it appears on one security blocklist. The domain's registration through a known provider and its recent creation date suggest a quickly spun-up attack. The use of a Vercel subdomain (vercel.app) is a common tactic to evade reputation filters, as these subdomains are often trusted by users.

As of now, the domain remains active and accessible, posing a high risk to Apple users who may be tricked into entering credentials. PhishDestroy recommends immediate blocking of this domain and warns users to avoid interacting with it. No takedown action has been observed. Users should always verify URLs directly on official Apple websites and report any suspicious pages to security teams. The remaining risk is elevated until the domain is taken down or flagged by more blocklists.