This subdomain was vulnerable because it pointed to an unclaimed GitHub Pages site.
Security Researcher: Skumar