utsav-kakdiya[.]github[.]io

This domain, utsav-kakdiya.github.io, is actively engaged in credential harvesting phishing operations targeting user authentication credentials. Analysis indicates the domain hosts fraudulent login portals mimicking legitimate services to deceive users into submitting sensitive information such as usernames, passwords, and multi-factor authentication codes. The infrastructure is designed to capture and exfiltrate credentials in real time, posing a direct risk to personal and organizational security. Evidence supporting this assessment includes detection by 5 out of 95 security vendors on VirusTotal, with classifications specifically identifying phishing behavior. The domain is registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, a known hosting provider for GitHub Pages. Google Safe Browsing has flagged the domain under the SOCIAL_ENGINEERING category, further confirming its malicious intent. The SSL certificate is issued by Let's Encrypt, which, while not inherently malicious, is frequently leveraged by threat actors to lend legitimacy to phishing sites. No historical registration data is available due to the domain being hosted on a third-party platform, but current activity confirms ongoing malicious use. Users who have visited utsav-kakdiya.github.io or entered credentials on any page hosted under this domain should immediately take corrective action. All exposed credentials must be considered compromised and changed without delay, prioritizing accounts with elevated privileges or access to sensitive systems. Enable multi-factor authentication on all critical accounts if not already active. Monitor affected accounts for unauthorized access or anomalous activity, such as unexpected password reset emails or unrecognized login attempts. Organizations should review logs for connections to 185.199.108.153 and the domain utsav-kakdiya.github.io, and consider blocking both at the network perimeter. Report the incident to internal security teams or relevant authorities to support broader mitigation efforts.