sathedhiraj[.]github[.]io

PhishDestroy identifies sathedhiraj.github.io as an active credential-harvesting phishing site hosting a fake login page designed to steal user credentials. The domain leverages GitHub Pages infrastructure to appear legitimate while impersonating a login portal to harvest credentials. Risk level for this domain is elevated due to active phishing operations and confirmed blocklist presence, indicating ongoing user targeting.

This domain was flagged by 15 out of 95 VirusTotal security vendors, indicating widespread detection of malicious content. It is registered through GitHub, Inc. and resolves to IP address 185.199.108.153. The domain is blocked by OpenPhish, a leading phishing intelligence feed, and secured using a Let's Encrypt SSL certificate to appear trustworthy. Despite being hosted on a reputable platform, the presence on one security blocklist underscores its malicious intent and operational status.

To mitigate risk, users should avoid interacting with sathedhiraj.github.io entirely. If credentials were entered, immediately change passwords on all accounts using the same credentials and enable multi-factor authentication. Organizations should block this domain at the network level using threat intelligence feeds like OpenPhish. Report the domain to GitHub and your security team to aid in takedown efforts. Always verify URLs before entering sensitive information, especially when redirected from unexpected sources.