huzaifa-devpk[.]github[.]io

PhishDestroy identifies huzaifa-devpk.github.io as an active credential theft phishing domain impersonating legitimate services to harvest user credentials. This GitHub-hosted page (185.199.108.153) uses a Let's Encrypt SSL certificate to appear legitimate while targeting victims with fake login forms. Users attempting to interact with this domain risk direct credential exposure and potential follow-on attacks. This domain was flagged by 6 out of 95 VirusTotal security vendors and remains blocked by OpenPhish. It is registered through GitHub, Inc. and resolves to IP 185.199.108.153. The campaign is currently active and has appeared on 1 known security blocklist, indicating ongoing malicious activity. GitHub's infrastructure is being abused to host this threat, complicating direct takedown efforts. If you visited huzaifa-devpk.github.io, immediately change passwords for any accounts entered on this site. Scan your device for malware using updated antivirus tools and monitor accounts for suspicious activity. Report the domain to your security team or through your organization's phishing reporting channel. Avoid interacting with any unexpected login prompts linked from this domain to prevent credential compromise.