netflix-clone-shivang02[.]vercel[.]app

Analysis indicates that netflix-clone-shivang02.vercel.app is actively employed as a phishing platform. The domain was created on January 28, 2020 and registered through Vercel, an infrastructure provider that also hosts the site at IP address 216.198.79.3. VirusTotal records show that 20 of 91 security vendors have flagged the domain, providing cross‑vendor corroboration of malicious intent. The domain is listed on one public blocklist, specifically PhishDestroy, confirming that at least one anti‑phishing service has taken mitigation action.

Google Safe Browsing further classifies the site as a social engineering threat, reinforcing the generic phishing assessment. No public information is available regarding the page title, SSL/TLS certificate details, HTTP response codes, or the exact content served, leaving the precise appearance of the page unverified. This lack of visible transport‑layer data prevents confirmation of encryption usage and any potential certificate mis‑issuance. Defenders should immediately block connections to the domain and its associated IP address at perimeter firewalls and DNS filtering layers.

Network monitoring rules ought to be tuned to alert on outbound traffic toward the IP, especially from endpoints that handle credential input. Given the existing vendor detections, blocklist inclusion, and Safe Browsing flag, the risk level remains high, and the site should be treated as an active threat. Continuous re‑evaluation is recommended; any observed credential harvesting attempts or payloads should be submitted to threat‑intel sharing platforms for further correlation.