netflix-clone-plum-two[.]vercel[.]app

The domain netflix-clone-plum-two.vercel.app is actively engaged in brand impersonation phishing, specifically targeting Apple users. This threat is classified as high risk and remains active as of the latest analysis. Despite its misleading title referencing Netflix India, the domain is designed to deceive visitors into believing they are interacting with Apple services.

PhishDestroy has identified several key technical indicators. The domain resolves to IP address 64.29.17.67 and was registered on March 02, 2026, through Vercel Inc. It appears on 1 security blocklist and is flagged by 19 out of 95 VirusTotal vendors. Google Safe Browsing also flags the domain for phishing. The registration with Vercel, a legitimate hosting provider, suggests the attackers are leveraging a trusted infrastructure to bypass initial scrutiny.

Given the high risk level and active status, users who encounter this domain should avoid interacting with it entirely. Do not enter any personal information, and report the domain to your email provider or security team. PhishDestroy recommends blocking the domain at the network level and educating users about this specific threat. Regularly monitor for similar domains using the unique seed f4d0c5 to stay ahead of evolving phishing campaigns.