pawanchaurasia47-lang[.]github[.]io

A recently activated phishing site hosted on GitHub Pages is luring visitors with the domain pawanchaurasia47-lang.github.io in order to harvest login credentials and personal information. PhishDestroy analysis shows the page impersonates a legitimate service, using Let’s Encrypt SSL to appear trustworthy. The domain resolves to IP address 185.199.108.153 and has triggered Google Safe Browsing’s social-engineering warning.

PhishDestroy identifies this as a high-risk social-engineering phishing campaign because it attempts to trick users into entering sensitive data. VirusTotal confirms 17 out of 95 security vendors already flag the domain, and the page was registered through GitHub, Inc. The site carries a valid Let’s Encrypt certificate dated within the last few days, giving it an air of legitimacy while masking its malicious purpose. Google’s Safe Browsing service has already categorized the page under social-engineering, confirming the deception is active and ongoing.

If you visited pawanchaurasia47-lang.github.io, avoid entering any login details or personal information. Disconnect from the site immediately and run a malware scan on your device using up-to-date antivirus software. Report the domain to your IT security team or the platform hosting the page—in this case GitHub’s abuse channel—so the page can be removed. Consider changing passwords for any accounts you may have entered, but do so only from a known-safe device and network. Stay alert for follow-up phishing emails referencing this site, as attackers often reuse captured credentials in secondary campaigns.