homeaccs-log[.]github[.]io

This domain, homeaccs-log.github.io, is identified as an active phishing resource specializing in brand impersonation. Analysis confirms it targets Facebook users by replicating the social media platform's login interface. The page title explicitly displays 'Facebook,' and the domain structure leverages GitHub Pages infrastructure, a common tactic to evade initial scrutiny while maintaining low-cost hosting. No explicit drainer kit signatures have been observed, but the site employs standard credential-harvesting techniques typical of phishing campaigns. Technical indicators provide concrete evidence of malicious intent. The domain resolves to IP address 185.199.111.153, associated with a content delivery network provider in the United States. It was registered through MarkMonitor, Inc., though the creation date of February 21, 2026, suggests potential inaccuracies or manipulation in WHOIS records. Google Safe Browsing has flagged the domain as phishing, and it appears on two independent security blocklists. VirusTotal detection metrics show 20 out of 95 security vendors classifying the domain as malicious. The SSL certificate, issued by Let's Encrypt, follows standard practices but does not mitigate the underlying threat. The domain remains active as of the latest verification, with no signs of takedown or remediation. Response actions by security providers include blocking by PhishDestroy and PhishingDB, though the GitHub Pages origin complicates rapid mitigation. The remaining risk is assessed as high due to the domain's continued operation and direct targeting of sensitive user credentials. Organizations and individuals are advised to implement network-level blocking of the domain and IP address, while users should verify URL authenticity before entering login credentials on any platform-mimicking page.