akankshap-homepage-clone[.]netlify[.]app

This domain, akankshap-homepage-clone.netlify.app, is identified as a credential harvesting infrastructure specifically designed to impersonate Netflix, a global streaming service. The site replicates Netflix India’s login interface, targeting users with the intent to capture sensitive account credentials, payment details, or personal information. Analysis confirms the domain is currently offline, though prior activity aligns with known phishing campaigns targeting brand loyalty and subscription services. Infrastructure analysis reveals multiple high-confidence threat indicators. The domain was flagged by 21 of 95 security vendors on VirusTotal, with additional blocking by PhishDestroy and inclusion on one security blocklist. Registered through Name.com, Inc. under the Netlify platform, the domain was created on February 21, 2026, and resolved to the IP address 35.157.26.135, hosted on Amazon.com, Inc. infrastructure (AS16509) in Germany. The SSL certificate, issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1), provides a veneer of legitimacy but does not mitigate the underlying malicious intent. The page title, 'Netflix India – Watch TV Shows Online, Watch Movies Online,' precisely matches the official Netflix India portal, further confirming the impersonation strategy. Current status indicates the domain has been taken offline, reducing immediate risk to end users. However, the infrastructure and registration patterns suggest potential for reactivation or migration to alternative domains. Organizations and individuals are advised to implement proactive measures, including domain monitoring for similar naming conventions (e.g., brand-name-clone.netlify.app), enforcement of blocklists containing this domain, and user education on identifying impersonation attempts. Network-level protections should be configured to block traffic to the resolved IP address 35.157.26.135 and associated Netlify subdomains. Credential security protocols, such as multi-factor authentication and password managers, should be mandated for all streaming service accounts to mitigate the impact of potential credential exposure.