miguel-nabs[.]github[.]io

This domain, miguel-nabs.github.io, is flagged as a credential harvesting phishing site designed to deceive visitors into disclosing login credentials, financial details, or other sensitive information. The site mimics legitimate services or communications, leveraging social engineering tactics to exploit user trust. While the page currently displays a 'Site not found' message, this may indicate a temporary takedown, dormant state, or cloaking technique to evade detection while maintaining operational infrastructure. Analysis indicates the domain is hosted on GitHub Pages infrastructure, resolving to IP address 185.199.108.153, located in the United States. The domain is registered through GitHub, Inc., and secured with a Let's Encrypt SSL certificate (R12). Despite the benign error page, the domain is flagged by 11 out of 95 security vendors on VirusTotal, and appears on one security blocklist. The discrepancy between the inactive front-end and active malicious classification suggests the domain may be repurposed for phishing campaigns during specific windows or under certain conditions. Visitors who accessed miguel-nabs.github.io should assume potential exposure. Immediately change any credentials entered on the site, particularly if reused across other platforms. Monitor financial accounts and credit reports for unauthorized activity. Scan devices used to access the domain for malware or unauthorized software. Report the incident to internal security teams or relevant authorities for further investigation. Organizations should update web filtering rules to block the domain and its associated IP address, and alert employees to the threat. Infrastructure owners should review GitHub Pages repositories for unauthorized or suspicious deployments linked to this domain.