pooja-bhoite[.]github[.]io

PhishDestroy identifies pooja-bhoite.github.io as a credential theft phishing domain actively impersonating legitimate services to harvest user login credentials. This GitHub-hosted page leverages social engineering tactics to deceive victims into entering sensitive information, likely targeting unsuspecting users under the guise of a trusted platform. The threat actor behind this domain employs deceptive techniques to bypass traditional security measures, posing a significant risk to individuals and organizations alike. This domain was flagged by 16 out of 95 VirusTotal security vendors, indicating a high detection rate among leading cybersecurity solutions. Registered through GitHub, Inc., the domain resolves to IP address 185.199.110.153 and utilizes a Let's Encrypt SSL certificate to appear legitimate. Google Safe Browsing has classified it under SOCIAL_ENGINEERING, and it is blocked by OpenPhish, while appearing on 1 security blocklist. These indicators collectively underscore the domain's malicious intent and elevated risk profile. If you have visited pooja-bhoite.github.io, immediately cease any interaction with the page and avoid entering any credentials or personal information. Clear your browser cache and cookies, then run a full system scan using updated antivirus software. Report the domain to your organization's security team or to PhishDestroy for further analysis. If you entered login details, change passwords for all potentially affected accounts immediately and enable multi-factor authentication where available. Exercise heightened caution with unsolicited links and always verify the legitimacy of websites before submitting sensitive data.