netflix-clone-teal-eight[.]vercel[.]app

The domain netflix-clone-teal-eight.vercel.app is currently active and involved in a tech support scam targeting users by impersonating Apple. It has been flagged as malicious by 22 out of 93 vendors on VirusTotal, indicating a significant level of threat. The domain is also listed on one public blocklist, specifically PhishDestroy, and is flagged by Google Safe Browsing, which underscores its malicious intent.

Interestingly, although the page title suggests a Netflix landing page, the site impersonates several brands, including Apple, Netflix, PlayStation, X.com, and Xbox. This multi-brand impersonation is a tactic to broaden the potential victim pool and increase the likelihood of deceiving users. The domain is registered with Tucows Domains Inc. and hosted on an IP address associated with Amazon.com, Inc., located in the United States.

Despite being created on February 21, 2026, PhishDestroy identified this threat four days earlier, on February 17, 2026. This early detection highlights the effectiveness of PhishDestroy's threat intelligence pipeline, which captures emerging threats before they are widely recognized by antivirus vendors. The platform risk score is relatively low at 10 out of 100, suggesting that while the threat is active, its impact may be limited by current detection measures. However, the presence of multiple brand impersonations and its active status warrant continued monitoring.