That's why there should only be explicit subdomains (e.g. www) pointing to
http://USERNAME.github.io

I used a wildcard out of a habit, if you own the machine serving the website
that's usually fine and makes things easy.

I now know better.