netmirror-clone22j2o89[.]netlify[.]app

Netmirror-clone22j2o89.netlify.app is an active domain engaged in a tech support scam, primarily impersonating Apple. With 24 out of 94 vendors on VirusTotal marking it as malicious, it poses a significant threat. The domain also appears on one public blocklist, specifically PhishDestroy, and is flagged by Google Safe Browsing.

This domain is part of a broader scheme, as it also displays brands like Netflix, PlayStation, and Xbox on its pages, potentially widening its target audience. The page title misleadingly references Netflix India, aiming to lure users into a false sense of security. Registered through Netlify and hosted on an IP associated with Amazon in Germany, the domain benefits from a reputable infrastructure, which may help it evade initial scrutiny.

The SSL certificate issued by DigiCert further adds a veneer of legitimacy, making it harder for users to detect the scam. The platform risk score is alarmingly high at 100 out of 100, indicating a severe threat level. Despite its recent creation on March 13, 2026, PhishDestroy identified it immediately, highlighting the domain's freshness and potential to exploit the gap before antivirus databases update their records.