oyekaleisrael2-dev[.]github[.]io

This domain, oyekaleisrael2-dev.github.io, is actively engaged in credential theft through brand impersonation, specifically targeting users of Netflix Nigeria. The site remains operational as of the latest verification, presenting a high-risk threat to individuals attempting to access streaming services or manage subscriptions through fraudulent portals. Analysis indicates the domain is hosted on GitHub Pages infrastructure, registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, associated with AS54113 (Fastly, Inc.) in the United States. The page title explicitly references Netflix Nigeria, reinforcing the targeted impersonation. Security vendors on VirusTotal have flagged this domain, with 9 of 95 engines detecting malicious activity. The domain appears on at least one security blocklist, and its SSL certificate is issued by Let's Encrypt (R12), a common attribute of both legitimate and malicious sites. No historical registration data is available due to the use of GitHub Pages, which obscures traditional WHOIS records. The current status of oyekaleisrael2-dev.github.io remains active, posing an ongoing risk to users who may encounter the site through phishing emails, malicious advertisements, or compromised links. Organizations and individuals are advised to block the domain at the network level and update endpoint protection rules to include this indicator. Users should be educated to verify URLs before entering credentials, particularly when prompted by unsolicited communications. Monitoring for additional domains leveraging similar naming conventions (e.g., brand names combined with GitHub Pages subdomains) is recommended to preempt further credential theft attempts.