nh638720-cmd[.]github[.]io

This domain, nh638720-cmd.github.io, is an active phishing site designed to harvest user credentials through deceptive login portals. Analysis indicates the site mimics legitimate authentication pages, tricking visitors into entering sensitive information such as usernames, passwords, or other personal data. The threat primarily targets individuals who may believe they are accessing a trusted service, only to have their credentials stolen and potentially used for unauthorized account access or further malicious activity. Infrastructure analysis reveals the domain is hosted on GitHub Pages, a legitimate service often abused for phishing due to its free hosting and SSL certificates. The site resolves to the IP address 185.199.110.153, associated with Fastly, Inc. (AS54113) in the United States. It employs a Let's Encrypt SSL certificate (R12), which provides an illusion of security while remaining fully functional for malicious purposes. As of the latest scan, 7 out of 95 security vendors on VirusTotal have flagged the domain as malicious, confirming its phishing nature. The domain appears on at least one security blocklist and is currently marked as active, with no indication of takedown efforts. If you have visited nh638720-cmd.github.io or entered any information on the site, immediate action is required. First, change the passwords for any accounts that may have been exposed, prioritizing email, financial, and work-related credentials. Enable multi-factor authentication (MFA) on all critical accounts to mitigate the risk of unauthorized access. Monitor your accounts for suspicious activity, such as unrecognized logins or transactions, and report any anomalies to the respective service providers. Additionally, scan your device for malware using updated security tools to ensure no secondary infections were introduced. Avoid interacting with the domain or any links associated with it, and report the phishing site to GitHub for takedown by submitting abuse reports through their official channels.