yraja09[.]github[.]io

This domain, yraja09.github.io, is identified as an active credential harvesting phishing site designed to deceive users into submitting sensitive login credentials, financial details, or personal information. Analysis indicates the infrastructure is specifically engineered to mimic legitimate services, likely targeting users through social engineering tactics such as fake login portals, fraudulent account verification prompts, or counterfeit payment gateways. The domain leverages GitHub Pages for hosting, a common tactic among threat actors to exploit reputable platforms and evade initial detection while maintaining low operational costs. Evidence supporting this assessment includes multiple technical indicators. The domain was registered on April 15, 2026, and is currently active, resolving to the IP address 185.199.108.153, associated with GitHub, Inc. infrastructure in the United States. It appears on one security blocklist and is flagged by 7 out of 95 security vendors on VirusTotal, indicating a moderate but concerning level of detection. The SSL certificate is issued by Let's Encrypt (R12), a detail that may lend a false sense of legitimacy to unsuspecting users. The page title, 'Site not found · GitHub Pages,' suggests either an attempt to mislead automated scanners or a placeholder state for future malicious deployment. Users who have visited yraja09.github.io or interacted with its content should take immediate remedial actions. Any credentials, payment details, or personal information entered on this domain should be considered compromised and must be changed across all platforms where identical or similar credentials were used. Affected users should enable multi-factor authentication on critical accounts and monitor for unauthorized transactions or access attempts. System scans using updated security tools are recommended to detect potential malware or persistent threats. Organizations should update their web filtering policies to block this domain and its associated IP address to prevent further exposure.