upadhayays893-creator[.]github[.]io

PhishDestroy has identified upadhayays893-creator.github.io as a high-risk phishing domain actively impersonating creator services to harvest credentials and sensitive data. This GitHub-hosted page leverages deceptive branding to trick users into entering login details or downloading malicious payloads under the guise of creator tools or services. The attackers rely on GitHub's trusted infrastructure to lend credibility to their malicious site, exploiting the platform's reputation to bypass initial suspicion. Security telemetry confirms this domain is weaponized for credential theft, with phishing kits designed to capture usernames, passwords, and multi-factor authentication codes from unsuspecting creators. Evidence strongly supports classifying this domain as a critical threat. VirusTotal analysis shows 15 out of 95 security vendors have flagged this domain as malicious, indicating widespread suspicion of its intent. Registered via GitHub, Inc., this domain resolves to IP address 185.199.108.153 and is equipped with a Let's Encrypt SSL certificate, further enhancing its appearance of legitimacy. Notably, upadhayays893-creator.github.io is listed on one active security blocklist and remains unblocked by many organizations due to its use of a reputable hosting provider. The domain continues to operate with an active status, demonstrating ongoing malicious activity. Users who have visited this domain should immediately review their online accounts—especially those related to content creation, cloud services, or payment processors—for any signs of unauthorized access or data exposure. Change passwords and enable multi-factor authentication on all potentially affected accounts, and scan devices for malware using a trusted security solution. Report any suspicious activity to platform providers and monitor financial accounts for irregular transactions. Organizations should block this domain at the network level and update security policies to detect similar GitHub-hosted phishing campaigns. Avoid interacting with unsolicited links or downloads from creator-themed domains, and always verify URLs before entering credentials.