movie-ui-clone-mu[.]vercel[.]app

The domain movie-ui-clone-mu.vercel.app is currently classified as a high‑risk generic phishing site. According to the latest intelligence, the domain appears on one public security blocklist and is actively blocked by the PhishDestroy platform. Registration information shows the domain was provisioned through Vercel’s hosting service, which is commonly used for short‑lived malicious deployments. Google Safe Browsing has flagged the URL for social engineering, indicating that the site likely attempts to harvest user credentials or personal data.

VirusTotal scans have returned 12 positive detections out of 91 submitted security vendors, reinforcing the malicious assessment. The domain’s registration timestamp and any associated WHOIS privacy settings have not been released, limiting attribution efforts. No evidence of a dedicated content delivery network, unusual ASN, or distinct IP address range has been observed, suggesting the operator may rely on Vercel’s shared infrastructure to evade detection. SSL/TLS details, HTTP status codes, and the page title are not publicly disclosed, so the presence of a valid certificate or specific redirect behavior cannot be confirmed, though Google Safe Browsing warnings imply the URL is reachable over HTTPS.

The combination of blocklist presence, PhishDestroy enforcement, Google Safe Browsing social‑engineering flag, and multiple vendor detections provides strong confidence that the site is being used for credential collection. Defenders should add movie-ui-clone-mu.vercel.app to URL filtering and web‑proxy block lists, monitor outbound traffic for connections to Vercel hosting ranges, and enforce multi‑factor authentication to mitigate credential compromise. Ongoing monitoring of VirusTotal updates and blocklist expansions is recommended to capture any changes in detection coverage.