clickjacing can lead to account takeover

hello team . while testing the site we found an endpoint call https://sketch.pixiv.net/draw {F2626044} using it we can trick the user to fake login with the use of clickjackingpoc : https://github.com/shifa123/clickjackingpoc as poc shown : {F2626057}