rahulgrover01[.]github[.]io

PhishDestroy has identified rahulgrover01.github.io as a high-risk generic phishing domain that is currently active and impersonating GitHub login pages. This threat is not merely suspicious but actively deployed to steal credentials, as confirmed by multiple security sources.

The domain was created on March 31, 2026, and is registered through GitHub, Inc., resolving to IP 185.199.108.153. VirusTotal analysis shows 13 out of 95 security vendors flagging this domain as malicious, and Google Safe Browsing specifically lists it as a phishing site. It appears on one security blocklist, and its SSL certificate is issued by Let's Encrypt / R12. The page title reads "Site not found · GitHub Pages," which is a default GitHub Pages error, but the domain's association with phishing campaigns raises serious concerns.

Users should avoid visiting this domain or entering any credentials. If you have already submitted information, change your GitHub password immediately and enable two-factor authentication. Report the domain to GitHub's abuse team and monitor your accounts for unauthorized activity. PhishDestroy recommends blocking this domain at the network level and educating users about verifying URLs before logging in.