fanomcraze-collab[.]github[.]io

Fanomcraze-collab.github.io mimics a legitimate collaboration site to trick users into entering login details, exposing credentials to attackers.

PhishDestroy’s analysis confirms this domain is a live phishing page hosted on GitHub Pages, resolving to IP address 185.199.108.153 and using a Let’s Encrypt SSL certificate to appear trustworthy. Eleven out of ninety-five VirusTotal security engines have already flagged this domain as malicious, placing it on the OpenPhish blocklist. This elevated risk stems from its use of GitHub’s infrastructure to bypass traditional email filters and host convincing cloned pages.

If you visited fanomcraze-collab.github.io, immediately change passwords on any accounts that share that login info and enable multi-factor authentication where available. Next, run a full antivirus scan and review recent account activity for unauthorized access. Consider reporting the incident to your organization’s security team or platform provider using the exact domain, not defanged variants. Always verify collaboration links through official channels before entering credentials, especially when they appear to come from unsolicited invites.