ezedinbuchukwuebuka-maker[.]github[.]io

This domain, ezedinbuchukwuebuka-maker.github.io, is flagged as a high-risk credential harvesting phishing site targeting unsuspecting users through GitHub Pages infrastructure. Analysis indicates no specific brand impersonation or known drainer kit association, though the generic phishing framework suggests broad targeting of login credentials, financial data, or personal information. The absence of a visible phishing page under the 'Site not found' title may indicate either a placeholder state, a takedown of the active payload, or a cloaking mechanism designed to evade automated detection systems. Infrastructure analysis reveals the following technical indicators: the domain is registered through GitHub, Inc. and resolves to the IP address 185.199.108.153, a known GitHub Pages endpoint located in the United States. VirusTotal reports 15 out of 95 security vendors flagging this domain as malicious, while Google Safe Browsing explicitly classifies it as phishing. The domain appears on at least one security blocklist, and its SSL certificate is issued by Let’s Encrypt (R12). The creation date of the GitHub repository or Pages deployment is not publicly disclosed, though the active status and detection metrics suggest recent malicious activity. Current status remains active, with no evidence of remediation or repository deletion by the hosting provider. The domain continues to resolve, and the SSL certificate remains valid, allowing encrypted connections that may lend false legitimacy to the phishing attempt. Response actions by the hosting provider appear limited, as GitHub Pages does not proactively scan for phishing content unless reported. The remaining risk is elevated due to the domain’s persistence, the use of trusted infrastructure, and the potential for future payload deployment. Organizations and users are advised to block this domain at the network level, monitor for related subdomains or repository forks, and report the activity to GitHub’s abuse team for takedown. Endpoint protection systems should be updated to include this domain in phishing detection rules, and security teams should investigate any prior exposure or credential submissions to this URL.