next-netflix-22nd-pekp-d5r1q7sce-seonghun-jungs-projects[.]vercel[.]app

This domain, next-netflix-22nd-pekp-d5r1q7sce-seonghun-jungs-projects.vercel.app, is flagged for elevated-risk brand impersonation targeting Netflix. Analysis indicates the domain was designed to mimic the legitimate Netflix platform, likely to deceive users into divulging credentials or payment information. No active drainer kit signatures were identified, but the domain’s structure and naming convention strongly suggest intent to impersonate a trusted brand for malicious purposes.

Technical indicators reveal the domain was registered on February 21, 2026, through Tucows Domains Inc. and resolves to IP address 64.29.17.195, hosted on Amazon.com, Inc. infrastructure (AS16509). The SSL certificate is issued by Google Trust Services (WR1). VirusTotal detection rates show 19 out of 95 security vendors flagging the domain as malicious. The domain appears on two security blocklists and was blocked by multiple threat intelligence feeds. Google Safe Browsing (GSB) status is not explicitly stated, but the domain’s presence on blocklists and vendor detections align with known malicious activity patterns.

As of the latest assessment, the domain has been taken offline, and the page title displays "Deployment Unavailable." While the immediate threat appears mitigated, residual risk remains due to the domain’s recent creation and the potential for reactivation. Organizations are advised to monitor for related infrastructure, such as subdomains or newly registered domains with similar naming patterns. Users should be alerted to verify URLs before entering credentials, particularly for services frequently targeted by brand impersonation campaigns.