labsbyakash[.]github[.]io

This domain, labsbyakash.github.io, operates as a high-risk credential phishing site targeting users of a major streaming service. The page replicates the Netflix India interface, presenting a login portal designed to harvest account credentials, payment details, and personal information. Analysis indicates the site employs social engineering tactics, including a cloned UI and urgent messaging, to deceive victims into submitting sensitive data. The domain is hosted on GitHub Pages infrastructure, a common vector for phishing due to its ease of deployment and perceived legitimacy. Infrastructure analysis reveals the domain is registered through GitHub, Inc., resolving to IP address 185.199.109.153 (AS54113, Fastly, Inc.). Security vendors have flagged the domain on VirusTotal, with 14 out of 95 engines detecting malicious activity. The site appears on one security blocklist and is explicitly labeled as phishing by Google Safe Browsing. The SSL certificate is issued by Let’s Encrypt (R12), providing HTTPS encryption that may mislead users into perceiving the site as trustworthy. Despite these detections, the domain remains active and accessible. Users who visited labsbyakash.github.io should immediately revoke any entered credentials by changing passwords on the legitimate streaming service platform. Monitor financial accounts for unauthorized transactions, as harvested data may be used for fraud. Clear browser cache and cookies to remove any lingering session data. Report the domain to local cybersecurity authorities or incident response teams for further investigation. Organizations should update web filtering rules to block access to this domain and its associated IP address to prevent internal exposure.