netclone08[.]netlify[.]app

Analysis of netclone08.netlify.app indicates that the domain is actively used for a generic phishing campaign and is classified as high risk. The site is hosted on Netlify, as confirmed by the registration information, and was flagged by Google Safe Browsing for social engineering, a designation that aligns with phishing behavior. Independent threat‑intel platform PhishDestroy has already added the domain to its blocklist, and the domain currently appears on one additional security blocklist.

VirusTotal scans show that 11 of 91 AV engines have raised detections against the domain, confirming that multiple security vendors recognize malicious activity. The combined evidence from these sources suggests the domain is being leveraged to harvest credentials or personal data, although the exact payload or target brand has not been disclosed. Defenders should immediately block netclone08.netlify.app at perimeter filters, DNS resolvers, and endpoint firewalls.

Monitoring for outbound connections to the domain’s hosting infrastructure is advised, as well as updating URL filtering rules to include the domain in deny lists. Organizations should also educate users about the risk of social‑engineering links that may appear to originate from legitimate Netlify‑hosted sites. Continuous re‑evaluation is recommended, as additional detections or blocklist entries may emerge as the campaign evolves.