maheswarig1434[.]github[.]io

This domain is flagged as a high-risk phishing site specializing in Apple ID credential harvesting. Analysis indicates the page masquerades as the official Apple Store, attempting to deceive users into submitting login credentials, payment details, or personal information. The threat type is classified as targeted credential phishing with a focus on Apple ecosystem users. Infrastructure analysis reveals the domain is hosted on GitHub Pages, resolving to IPv6 address 2606:50c0:8000::153 (AS54113, Fastly, Inc., US). The page title explicitly reads 'Apple Store,' and the domain remains active despite being blocked by one security blocklist. VirusTotal detection shows 6 out of 95 security vendors flagging the domain as malicious. The SSL certificate is issued by Let's Encrypt (R12), a common certificate authority exploited in phishing campaigns for perceived legitimacy. Mitigation requires immediate blocking of the domain and its resolving IP at the network perimeter. Security teams should deploy endpoint detection rules to flag any process attempting to connect to maheswarig1434.github.io or its associated IP. User awareness training should emphasize verifying domain authenticity before entering credentials, particularly for pages mimicking Apple services. Logs from web proxies and DNS resolvers should be reviewed for historical connections to this domain, and affected accounts should undergo forced password resets and multi-factor authentication enforcement.