netflix-clone-cyan-delta[.]vercel[.]app

The domain netflix-clone-cyan-delta.vercel.app has been identified as a brand impersonation phishing site that fraudulently mimics the Netflix streaming service while targeting the Apple brand. Although the page title reads "Netflix India – Watch TV Shows Online, Watch Movies Online," the threat analysis indicates this is a credential theft operation designed to harvest login details from unsuspecting visitors. The domain's deceptive appearance and malicious intent pose a high risk to users who may inadvertently enter sensitive information.

Technical indicators paint a clear picture of this domain's malicious nature. VirusTotal reports that 25 out of 95 security vendors flag this domain as malicious, and Google Safe Browsing specifically lists it as a phishing site. The domain resolves to IP address 216.198.79.131 and was registered on January 28, 2020, through Tucows Domains Inc. It currently holds an SSL certificate issued by Google Trust Services (WR1) and appears on one security blocklist. These combined data points confirm the domain is actively used for phishing attacks.

As of the latest check, netflix-clone-cyan-delta.vercel.app remains active and continues to pose a threat. Users who have visited this site should change their passwords immediately and monitor accounts for suspicious activity. PhishDestroy recommends blocking this domain at the network level and reporting it to relevant authorities. Ongoing vigilance is advised as similar domains may emerge under different subdomains or hosting providers.