netflix-omega-one[.]vercel[.]app

This domain, netflix-omega-one.vercel.app, poses a credential harvesting threat targeting Netflix users. Analysis indicates the site was designed to replicate the official Netflix login interface, tricking visitors into submitting their account credentials, payment details, or personal information. The impersonation extends to visual elements and page structure, increasing the likelihood of successful deception for unsuspecting users. Infrastructure analysis reveals the domain was flagged by 21 out of 95 security vendors on VirusTotal, a clear indicator of malicious intent. It appears on two security blocklists, including PhishDestroy and PhishingDB, and was registered through Vercel Inc., resolving to an IP address (216.198.79.195) hosted on Amazon.com, Inc. infrastructure in the US. The SSL certificate, issued by Google Trust Services, does not mitigate the risk, as phishing sites commonly use valid certificates to appear legitimate. If you visited netflix-omega-one.vercel.app or entered any information on the site, immediate action is required. First, change your Netflix password and enable multi-factor authentication if available. Review your account for unauthorized activity, such as unfamiliar devices, subscriptions, or payment methods. Monitor linked financial accounts for suspicious transactions and consider placing a fraud alert or credit freeze if payment details were exposed. Report the incident to the official Netflix support team and relevant cybersecurity authorities to aid in tracking and mitigating further threats.