anusriyacp[.]github[.]io

The domain anusriyacp.github.io is confirmed as a credential theft scam targeting unsuspecting users. It is hosted on GitHub Pages and designed to harvest login credentials by impersonating legitimate services. No specific brand or drainer kit has been identified, but the domain's purpose is to deceive users into submitting sensitive information.

Technical analysis reveals that anusriyacp.github.io has a VirusTotal detection ratio of 14 out of 95 security vendors, indicating a significant but not universal detection rate. The domain is registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, which is part of GitHub's infrastructure. The SSL certificate is issued by Let's Encrypt, which adds a layer of false legitimacy. Although the creation date is not provided, the domain is currently active and has been indexed by Google Safe Browsing (GSB) with warnings. It is also listed on multiple blocklists, contributing to its elevated risk classification.

This domain remains active, posing an elevated risk to users who might encounter it. Security teams and users should block access to anusriyacp.github.io and report any suspicious interactions. It is advisable to avoid clicking links related to this domain and to verify credentials only on official sites. Continuous monitoring and user education are recommended to mitigate potential credential theft from this source.