netflix-five-wine[.]vercel[.]app

PhishDestroy identifies an active Netflix credential phishing campaign using the domain netflix-five-wine.vercel.app. This site mimics the Netflix login page to trick visitors into revealing their email address and password. When victims enter credentials, the attackers harvest them for account takeovers and financial fraud. This domain was flagged by 22 of 95 VirusTotal security vendors, indicating a high consensus of malicious intent. It resolves to IP address 216.198.79.131 and is served over HTTPS via a Google Trust Services certificate, making the page appear legitimate at first glance. The domain is hosted on Vercel Inc.’s platform and has already been blocked by Phishunt, yet remains accessible to users who bypass security controls. If you visited netflix-five-wine.vercel.app, do not enter any login credentials or payment information. Immediately change your Netflix password using a known-safe device and enable two-factor authentication. Review recent account activity for unauthorized logins or transactions. Consider running a malware scan and monitor linked email accounts for signs of compromise. Report the incident to Netflix via their official support portal and delete any saved payment methods linked to the compromised account.