bcawala2025-glitch[.]github[.]io

bcawala2025-glitch.github.io is involved in a credential theft campaign designed to harvest sensitive user login information by impersonating trusted entities. This domain's primary threat lies in deceiving users into submitting personal credentials, potentially leading to unauthorized access and identity compromise.

This domain is registered through GitHub, Inc. and leverages GitHub Pages hosting. VirusTotal analysis shows that 8 out of 95 security vendors flag this domain as malicious, underscoring its elevated risk status. It resolves to the IP address 185.199.108.153 and uses a Let's Encrypt SSL certificate, which may lend a false sense of trust to victims. The domain remains active and is not currently listed on major blocklists beyond the VirusTotal detections.

Users who have visited bcawala2025-glitch.github.io and entered any login credentials should immediately change their passwords for affected accounts and monitor for suspicious activity. It is advised to avoid interacting with any links or forms hosted on this domain. Security teams should consider blocking access at the network level and educating users about the dangers of credential theft sites masquerading behind legitimate platforms like GitHub Pages.