finu-fayiz[.]github[.]io

This domain, finu-fayiz.github.io, is actively engaged in credential phishing targeting Netflix account holders. The page presents a fraudulent login interface mimicking the official Netflix platform, designed to harvest user credentials, payment details, and personal information. The threat is classified as high-risk due to its active status, targeted nature, and potential for financial fraud or identity theft against victims. Analysis indicates the domain is hosted on GitHub Pages infrastructure, resolving to the IP address 185.199.110.153, which is part of AS54113 (Fastly, Inc.) located in the United States. The SSL certificate is issued by Let's Encrypt (R12), providing a false sense of security to visitors. Security vendor detections on VirusTotal show 15 out of 95 engines flagging the domain as malicious. Additionally, the domain appears on two security blocklists, including PhishDestroy and PhishingDB, confirming its phishing classification. Users who have visited finu-fayiz.github.io or entered credentials on the page should immediately change their Netflix account password and enable multi-factor authentication if available. All associated devices should be logged out, and account activity should be reviewed for unauthorized access or transactions. If payment details were submitted, financial institutions should be contacted to monitor for fraudulent charges. Browser caches and saved passwords should be cleared to prevent further exposure, and security software should be used to scan for potential malware.