parakalanandhini[.]github[.]io

PhishDestroy identifies parakalanandhini.github.io as an active phishing site designed to steal banking credentials by disguising itself as a legitimate login portal. The domain hosts a fraudulent interface that prompts users to input sensitive financial information, which is then harvested by attackers for unauthorized transactions or sold on dark web markets. Unlike generic phishing pages, this site specifically targets victims by leveraging the trusted GitHub.io subdomain, exploiting user trust in reputable platforms to lower suspicion.

This domain was flagged by multiple security vendors, with 13 out of 95 scanners on VirusTotal detecting malicious activity. It is registered through GitHub, Inc., a legitimate hosting provider, but has been added to 1 security blocklist (OISD) due to its fraudulent nature. The site resolves to IP address 185.199.109.153 and uses a Let's Encrypt SSL certificate to appear legitimate. While GitHub's infrastructure may be compromised for hosting, the intent behind this domain is unambiguous: credential theft through social engineering.

If you visited parakalanandhini.github.io, immediately cease use of any credentials entered and monitor your financial accounts for suspicious activity. Change passwords for affected services and enable multi-factor authentication where possible. Report the domain to your bank or payment provider if you submitted financial details. Consider running a malware scan on your device to detect any unauthorized access. Avoid clicking links from unsolicited emails or messages purporting to originate from this domain. For further investigation, submit the URL to PhishDestroy’s analysis pipeline using seed 9f7a63 to track evolving threats from this campaign.