itxziyad[.]github[.]io

This domain, itxziyad.github.io, is actively engaged in credential harvesting phishing operations targeting users through deceptive login interfaces. The page title, module2-solution, suggests an attempt to mimic educational or technical resources, likely to trick individuals into submitting sensitive credentials under false pretenses. Such domains often exploit trust in familiar platforms or solutions to facilitate unauthorized access to accounts or personal data. Analysis indicates the domain was registered on March 08, 2013, through GitHub, Inc., and currently resolves to the IP address 185.199.108.153, hosted under AS54113 (Fastly, Inc.) in the United States. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites. Security vendors have flagged this domain as malicious, with 16 out of 95 engines on VirusTotal detecting it as phishing-related. Additionally, the domain appears on two security blocklists, further corroborating its malicious nature. Users who have visited itxziyad.github.io or interacted with its content should immediately revoke any credentials entered on the site. It is recommended to scan local systems for potential malware or unauthorized access, particularly if files were downloaded or scripts executed. Network administrators should block the domain and its associated IP address (185.199.108.153) at the perimeter to prevent further exposure. Monitoring for unusual account activity or unauthorized access attempts is advised, as compromised credentials may be leveraged in subsequent attacks.