megashriragavan79-oss[.]github[.]io

The domain megashriragavan79-oss.github.io is currently active and identified as a high-risk phishing site specifically targeting Netflix users. Analysis of the page title, 'Netf clo9ne', indicates an attempt to impersonate the legitimate Netflix login portal, likely aiming to harvest user credentials or payment information through deceptive input forms. The domain remains operational and poses a significant threat to unsuspecting visitors seeking streaming services. Infrastructure analysis reveals the domain is registered through GitHub, Inc., leveraging GitHub Pages for hosting. It resolves to the IP address 185.199.110.153, located in the United States under AS54113 (Fastly, Inc.). The domain appears on one security blocklist and is flagged by 6 of 95 security vendors on VirusTotal, including a specific phishing designation from Google Safe Browsing. The SSL certificate is issued by Let's Encrypt (R12), which, while providing encryption, does not validate the legitimacy of the content served. No historical registration data or creation date is publicly available due to the nature of GitHub Pages domains. Current status confirms the domain remains active and continues to host the phishing content. Organizations and individuals are advised to block the domain and its resolving IP (185.199.110.153) at the network perimeter. End-users should be alerted to verify URLs before entering credentials, particularly when redirected from emails or external links. Security teams are recommended to monitor for related indicators, including the unique seed '8b65ce', and correlate logs for any access attempts to this domain. Immediate reporting to GitHub's abuse channels is encouraged to facilitate takedown procedures.