faizan-khanjada[.]github[.]io

This domain is flagged as a high-risk phishing site designed to harvest GitHub credentials and personal information. Analysis indicates the site mimics legitimate GitHub pages to deceive users into entering login details, which are then captured by threat actors for unauthorized access or further attacks. The fraudulent nature of this site poses significant risks, including account takeovers, data breaches, and potential lateral movement within compromised systems. Infrastructure analysis reveals the domain is hosted on GitHub's platform, resolving to the IP address 185.199.108.153. The site uses a Let's Encrypt SSL certificate, which, while providing encryption, does not validate legitimacy. As of the latest assessment, 15 out of 95 security vendors on VirusTotal have flagged this domain as malicious, confirming its involvement in phishing activities. The domain remains active, increasing the urgency for users to exercise caution. If you have visited faizan-khanjada.github.io or entered any credentials on this site, immediate action is required. First, change your GitHub password and enable multi-factor authentication if not already active. Review your account for any unauthorized activity, such as unfamiliar repositories, commits, or linked applications. Additionally, monitor other accounts where the same password may have been reused, as threat actors often exploit credential reuse across platforms. Report the incident to your organization's security team or the platform's abuse contact to aid in takedown efforts.