netflix-clone-alpha-seven[.]vercel[.]app

This domain, netflix-clone-alpha-seven.vercel.app, is currently active and engaged in brand impersonation targeting Apple. Analysis indicates the site mimics legitimate Apple services to deceive users into disclosing sensitive credentials or personal information. The specific threat type is confirmed as brand impersonation, not generic phishing, with Apple identified as the primary target. Infrastructure analysis reveals the domain was registered on March 07, 2026, through Vercel Inc. and resolves to the IP address 64.29.17.3, hosted within Amazon.com, Inc.'s AS16509 network in the United States. Security vendors have flagged the domain, with 26 of 95 VirusTotal engines detecting malicious activity. The SSL certificate is issued by Google Trust Services under the identifier WR1. The domain appears on one security blocklist and is explicitly blocked by PhishDestroy. Google Safe Browsing further classifies the site as phishing, corroborating the threat assessment. The domain remains operational as of this report, posing an ongoing risk to users. Organizations and individuals are advised to block access to netflix-clone-alpha-seven.vercel.app at the network level and update endpoint protection rules to include this indicator. Users who may have interacted with the domain should immediately reset credentials for Apple-related accounts and monitor for unauthorized activity. Security teams are encouraged to review logs for connections to the IP 64.29.17.3 and correlate with other known indicators of compromise.