navaneethmp007[.]github[.]io

PhishDestroy identifies navaneethmp007.github.io as an active credential theft page designed to trick visitors into surrendering usernames and passwords. The site mimics legitimate login flows, harvesting credentials for later account takeovers or sale on underground markets. Security teams have observed a surge in GitHub-hosted phishing pages that bypass traditional email filters by leveraging trusted domains, making user vigilance the only reliable defense once the page lands in your browser.

This domain was flagged by 8 of 95 VirusTotal security vendors within hours of initial discovery, indicating strong but not universal detection. Registrar records show the site was created on GitHub, Inc.’s Pages platform and resolves to IP address 185.199.108.153, which hosts multiple phishing kits. The presence of a Let’s Encrypt SSL certificate further lowers victim suspicion by displaying a padlock icon in the address bar, creating a false sense of security.

If you visited navaneethmp007.github.io, immediately change passwords for any accounts you may have entered and enable multi-factor authentication wherever possible. Scan your device with an up-to-date antivirus suite and review recent login attempts for anomalies. Report the domain to your IT administrator or the platform hosting provider—GitHub—to accelerate takedown. Stay alert for follow-up phishing emails that may reference credentials you submitted on this page.