mahalaxmigouda-13[.]github[.]io

This domain is assessed as HIGH risk and is operating as a credential theft campaign leveraging Netflix brand impersonation. The hosted page title "Netflix Website Clone" indicates deliberate UI replication intended to harvest user login credentials. Infrastructure signals show active deployment rather than dormant staging.

Technical telemetry confirms multiple independent detections and infrastructure indicators. VirusTotal reports 16/95 security vendors flagging the domain as malicious. Google Safe Browsing classifies the domain as phishing. The domain mahalaxmigouda-13.github.io is registered through GitHub, Inc. and resolves to IP 185.199.110.153, hosted within AS54113 (Fastly, Inc.). SSL certificate is issued by Let's Encrypt (R12). The domain is currently active and has been observed on 1 security blocklist, with blocking enforced by PhishDestroy.

Mitigation analysis recommends immediate blocking at DNS, URL, and IP layers due to confirmed credential theft behavior. User-facing controls should include brand impersonation detection rules for Netflix login interfaces hosted on non-official domains. Security teams should enforce domain-based heuristics for GitHub Pages subdomains requesting authentication inputs. Endpoint protection should flag login forms served from non-authoritative infrastructure. Users should be advised to avoid credential submission and verify authentication only through official Netflix-owned domains. Continuous monitoring is required due to active status and potential rapid redeployment under new subdomains.