anmollnigam[.]github[.]io

PhishDestroy identifies the domain anmollnigam.github.io as an active generic phishing campaign impersonating banking portals. This threat leverages GitHub Pages to host fraudulent login interfaces, tricking users into disclosing credentials under the guise of legitimate financial services. The campaign remains operational as of the latest intelligence.

This domain was flagged by 16 of 95 VirusTotal security vendors and is blocked by OpenPhish. It is registered through GitHub, Inc., resolves to IP 185.199.109.153, and holds a Let's Encrypt SSL certificate. The domain appears on 1 security blocklist and exhibits low trust scores across threat intelligence feeds. No creation date is publicly available, indicating recent or concealed registration practices.

The campaign is currently active, with concrete indicators including the GitHub-hosted infrastructure and the specific IP address. Users should avoid interacting with this domain and report any observed activity. Organizations are advised to block the domain at the network perimeter, inspect DNS logs for related resolutions, and deploy email filtering rules to intercept associated phishing attempts. Immediate remediation includes user awareness training to recognize fraudulent banking portals and the implementation of multi-factor authentication to mitigate credential theft risks.