hafizikrashue[.]github[.]io

This domain, hafizikrashue.github.io, is currently flagged as an active fake login portal designed to harvest user credentials. Analysis indicates the site mimics legitimate authentication pages, likely targeting unsuspecting users through social engineering tactics. The domain remains operational and poses a significant risk to individuals and organizations. Infrastructure analysis reveals the domain resolves to the IP address 185.199.108.153 and is registered through GitHub, Inc. Security vendors on VirusTotal have flagged this domain, with 8 out of 95 engines detecting malicious activity. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites. The domain appears on one security blocklist and is actively monitored by threat intelligence platforms. No historical data suggests prior legitimate use, reinforcing its classification as a dedicated phishing infrastructure. Current status confirms the domain remains active and unmitigated. Organizations and individuals are advised to block all connections to 185.199.108.153 and hafizikrashue.github.io at the network perimeter. Endpoint protection solutions should be updated to include this domain in deny lists. Users who may have interacted with the site should immediately reset credentials on any accounts accessed during the exposure window. Network logs should be reviewed for connections to the IP or domain to identify potential compromise.