waqasrajput123[.]github[.]io

The domain waqasrajput123.github.io is currently hosting a fake login portal phishing attack and remains an active threat.

This domain was flagged by 15 of 95 VirusTotal security vendors for phishing activity. It is registered through GitHub, Inc., resolves to IP address 185.199.108.153, and holds a valid Let's Encrypt SSL certificate. GitHub pages infrastructure is being abused to distribute credential-harvesting content designed to impersonate a legitimate login interface.

The elevated risk level is corroborated by its presence on multiple threat intelligence feeds, with additional blocklists noting similar patterns. GitHub’s abuse team has been notified; however, the page remains accessible. Users should avoid entering any credentials on this domain. Security teams are advised to block the domain at the network perimeter and inspect endpoints for signs of credential compromise. Use automated tools to scan for related domains and monitor for unusual authentication activity originating from affected accounts.