Operation STANDOFF: A Campaign Hiding C2 Behind GitHub Redirects