netflix-clone-olive-mu[.]vercel[.]app

This domain, netflix-clone-olive-mu.vercel.app, is identified as a high-risk brand impersonation threat targeting Apple users. Analysis indicates the infrastructure presents a fraudulent Netflix India login page, leveraging the recognizable Netflix interface to deceive victims into entering Apple ID credentials. The threat type is classified as credential phishing with brand impersonation, though no specific drainer kit signatures have been confirmed at this time. Infrastructure analysis reveals the domain is registered through Vercel Inc. and resolves to IP address 216.198.79.3, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The domain is flagged by Google Safe Browsing as phishing and appears on two security blocklists. VirusTotal detection metrics show 25 out of 95 security vendors marking the domain as malicious. The SSL certificate is issued by Google Trust Services (WR1), providing a false sense of security to potential victims. As of the latest verification, the domain remains active and continues to resolve. Response actions by security providers include blocking by PhishDestroy and PhishingDB, though the infrastructure persists. The remaining risk is assessed as high due to the active status, established hosting, and confirmed detection by multiple security vendors. Users are advised to avoid interaction with the domain, verify URLs before entering credentials, and report any suspicious login pages to their security teams or the targeted brand's abuse channels.