mythili-ram[.]github[.]io

PhishDestroy has identified mythili-ram.github.io as an active domain involved in generic phishing attacks. This domain does not impersonate a specific brand but aims to deceive users through social engineering tactics, potentially harvesting sensitive information. There is no indication of a specialized drainer kit, but the threat level is assessed as high due to the broad phishing nature and multiple security flags.

The domain is registered via GitHub, Inc. and secured with a Let's Encrypt SSL certificate. It resolves to the IP address 185.199.108.153. VirusTotal analysis shows that 15 out of 95 security vendors have flagged the domain as malicious, confirming a significant detection rate. Google Safe Browsing has classified it under SOCIAL_ENGINEERING, indicating its use in deceptive schemes. The domain's registration and hosting through a reputable platform like GitHub adds complexity to mitigation efforts. Several blocklists have also flagged this domain, increasing its risk profile.

Currently, mythili-ram.github.io remains active and continues to pose a substantial threat. PhishDestroy recommends users avoid interacting with the site and exercise caution when encountering links associated with this domain. Security teams should implement network blocks and monitor for related phishing attempts. Despite detection by multiple systems, the domain's presence on a trusted hosting provider suggests ongoing risk, and vigilance is necessary to prevent credential theft or other phishing-related compromises.