netflix-update-payment-details[.]vercel[.]app

The domain netflix-update-payment-details.vercel.app is assessed as a high-risk, brand impersonation threat. This domain is actively impersonating the brand Google, potentially to deceive users into sharing sensitive information. The threat is particularly concerning given its current active status and the use of a misleading page title 'Netflix', which may cause confusion and reduce user vigilance.

Infrastructure analysis reveals that the domain resolves to the IP address 64.29.17.131, which is located in the United States and is part of the AS16509 Amazon.com, Inc. network. The domain was created on February 21, 2026, and is registered through Tucows Domains Inc. On VirusTotal, 25 out of 95 security vendors have flagged this domain as malicious. Additionally, the domain appears on one security blocklist and is blocked by the PhishDestroy service. Google Safe Browsing has also flagged this domain as a phishing site. The SSL certificate is issued by Google Trust Services / WR1, which may add a false sense of security to unsuspecting users.

To mitigate the risk associated with this brand impersonation attack, users are advised to verify the URL of any website requesting sensitive information, such as payment details or credentials. Organizations should update their security policies to include this domain in blocklists and educate employees about the signs of brand impersonation. Regularly monitoring network traffic for connections to this domain can help detect and prevent potential compromises.