jaishnavisiddam1[.]github[.]io

This domain, jaishnavisiddam1.github.io, operates as a credential phishing site targeting users of a popular streaming service. The page presents itself as a Netflix login portal, designed to deceive visitors into entering their account credentials, payment details, or other sensitive information. The cloned interface closely mimics the legitimate service, increasing the likelihood of successful deception, particularly among users who may not scrutinize the URL or page source before submitting data. Analysis indicates the site remains active and is hosted through GitHub Pages, a platform commonly used for legitimate web hosting but also exploited for phishing due to its free SSL certificates and reputable infrastructure. The domain resolves to the IPv6 address 2606:50c0:8000::153, associated with Fastly, Inc. (AS54113), a content delivery network. As of the latest scan, 7 out of 95 security vendors on VirusTotal have flagged this domain as malicious. The SSL certificate is issued by Let’s Encrypt, a widely trusted certificate authority, which further masks the site’s malicious intent by presenting a valid HTTPS connection. The page title explicitly reads 'Netflix Clone,' a clear indicator of its fraudulent purpose. Users who have visited jaishnavisiddam1.github.io should assume their credentials or payment information may have been compromised. Immediate action is required: affected individuals should change their streaming service password and any other accounts where the same credentials were reused. Enable multi-factor authentication (MFA) on all critical accounts to mitigate unauthorized access. Monitor financial statements for unauthorized transactions, as phishing sites often harvest payment details. If login credentials were entered, consider revoking active sessions on the legitimate service to terminate any unauthorized access. Report the incident to the legitimate service provider and relevant cybersecurity authorities to aid in takedown efforts. Avoid interacting with the domain further, and verify the legitimacy of any unexpected login prompts or emails from streaming services in the future.