aman-raj048[.]github[.]io

PhishDestroy identifies aman-raj048.github.io as a high-risk credential-harvesting domain actively used in social-engineering attacks. This GitHub-hosted page mimics legitimate login portals to trick visitors into surrendering passwords or personal data. The site’s deceptive design often includes cloned interfaces of popular services (e.g., email providers, banking sites) with slight URL variations to bypass casual scrutiny. Once credentials are entered, threat actors capture and reuse them for further fraud, including account takeovers or financial theft. Immediate action is critical if you’ve interacted with this domain.

This domain was flagged by 15 of 95 VirusTotal security vendors and blacklisted by Google Safe Browsing for SOCIAL_ENGINEERING tactics. Hosted on GitHub’s Pages platform at IP 185.199.110.153, it leverages a valid Let’s Encrypt SSL certificate to appear trustworthy. While GitHub’s infrastructure is legitimate, malicious actors exploit it to host phishing content freely. The domain’s recent creation date (undetected by standard filters initially) highlights how quickly such threats evolve to evade detection. Users cannot rely on platform reputation alone to assess safety.

If you visited aman-raj048.github.io, immediately change passwords for any accounts you may have entered on the site. Enable multi-factor authentication (MFA) where possible to add a critical security layer. Scan your device for malware using reputable antivirus tools, as stolen credentials may be the first step in broader attacks. Report the domain to your IT team or platform provider (e.g., Google Safe Browsing) to aid in disrupting the campaign. Avoid interacting with the site further, and warn others who may have been targeted. Proactive vigilance—like verifying URLs and checking reputable threat databases before entering data—remains the strongest defense.