The hostname demo-takeover.5ribalaji.com still has a live CNAME record pointing at a GitHub Pages target. When the original site was removed, that DNS record was left in place.
Because GitHub Pages does not verify domain ownership before binding a custom domain, any GitHub account can claim this hostname simply by registering it in a repository's Pages settings — no access to Cloudflare, the domain registrar, or the original account is required.
This page demonstrates that condition on a domain owned by the author, as a controlled proof-of-concept. No production system, third party, or unauthorized target was involved.