mritunjay121003[.]github[.]io

PhishDestroy identifies the domain mritunjay121003.github.io as a credential harvesting phishing host currently active and elevated in risk. This GitHub Pages subdomain is being used to mimic legitimate login portals for the purpose of stealing user credentials. The threat remains unresolved as of the latest scan cycle.

This domain was flagged by 15 of 95 VirusTotal security vendors and is blocked by OpenPhish. It resolves to IP address 185.199.108.153 and operates under a Let's Encrypt SSL certificate for HTTPS obfuscation. Registered through GitHub, Inc., the domain shows no publicly visible creation date due to GitHub's privacy protections, but has been observed hosting malicious content since initial detection. It has been listed on 1 public blocklist, indicating prior compromise and ongoing abuse.

Current status remains active with elevated risk due to active credential harvesting activity and partial SSL encryption. Users and organizations are strongly advised to block this domain at DNS and firewall levels. GitHub has been notified via abuse channels to investigate and suspend the account hosting this phishing page. Security teams should scan logs for any outbound connections to 185.199.108.153 and inspect internal DNS queries resolving to mritunjay121003.github.io. Immediate remediation includes revoking any exposed credentials and enabling MFA across affected accounts.