himanshu-gawhane[.]github[.]io

PhishDestroy identifies himanshu-gawhane.github.io as an active credential-theft phishing domain designed to harvest user login details under the guise of a harmless GitHub Pages site. This domain resolves to 185.199.110.153 and leverages a Let’s Encrypt SSL certificate to appear legitimate, tricking visitors into entering sensitive information on a fraudulent login interface. The page is still live and has been confirmed as malicious by PhishingDB, which has already blocked it at the network level. This domain was flagged by 8 of 95 VirusTotal security vendors, indicating strong but not universal detection of its hostile nature. The page is registered through GitHub, Inc., and currently appears on one blocklist. Despite its short operational period, the site already exhibits clear intent to deceive, using GitHub’s trusted infrastructure to evade initial suspicion. The combination of a legitimate-looking domain, recent deployment, and partial detection underscores its elevated risk as a phishing tool. Users who accessed this domain should immediately review any credentials entered and consider changing passwords, especially if reused across services. Enable multi-factor authentication on all accounts that may have been exposed. Report the domain to your security team and avoid interacting with similar GitHub-hosted pages unless fully verified. If you suspect compromise, scan your device for malware and monitor for unusual account activity.