agnikacharjee[.]github[.]io

PhishDestroy identifies agnikacharjee.github.io as an active credential theft domain. This GitHub-hosted page is weaponized to harvest user login credentials through deceptive web forms. The threat remains live, with continuous redirection to fake login portals mimicking legitimate services. Users entering credentials risk immediate account compromise and potential financial loss. Immediate action is required to prevent credential exposure.

This domain was flagged by 14 of 95 VirusTotal vendors, resolving to IP 185.199.108.153 via registrar GitHub, Inc. Google Safe Browsing classifies it under SOCIAL_ENGINEERING, confirming active phishing campaigns. The SSL certificate issued by Let's Encrypt provides a false sense of security, masking malicious intent. Trust scores across threat intelligence platforms remain critically low, with no legitimate content detected. The domain’s recent creation and rapid blacklisting indicate opportunistic deployment in credential harvesting operations.

Current assessments confirm agnikacharjee.github.io remains active and unblocked by most endpoint solutions. Technical indicators include persistent redirection chains, obfuscated JavaScript payloads, and spoofed input fields. Risk level is assessed as HIGH due to the combination of GitHub’s trusted infrastructure abuse and effective social engineering tactics. Users should immediately block the domain via hosts file or firewall rules. Security teams must scan for unauthorized credential submissions and audit GitHub Pages deployments for unauthorized content. Always verify URLs, disable auto-fill on suspicious pages, and report confirmed phishing sites to Google Safe Browsing and your threat intelligence provider.