soumyaranjanmuduli234-pixel[.]github[.]io

This domain, soumyaranjanmuduli234-pixel.github.io, is identified as a high-risk phishing site impersonating Netflix India to harvest user credentials. Analysis confirms the page title as "Netflix India - Watch TV Shows Online," indicating a targeted credential theft operation. The domain remains active and is designed to deceive users into submitting login details under false pretenses. Infrastructure analysis reveals the domain is hosted on GitHub Pages infrastructure, resolving to the IP address 185.199.108.153, associated with AS54113 (Fastly, Inc.). The domain is flagged by 7 of 95 security vendors on VirusTotal, with one active security blocklist entry. Google Safe Browsing has classified the domain as phishing, and it is currently blocked by at least one security provider. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites due to its accessibility. The domain remains operational as of the latest verification, posing an ongoing threat to users. Recommendations include immediate blacklisting of the domain and IP in enterprise security controls, deployment of endpoint protection rules to block access, and user education on recognizing phishing indicators. Network administrators should monitor for connections to 185.199.108.153 and review logs for potential credential exposure. Users encountering this domain should avoid interaction and report it to their security teams for further action.