udhay22r[.]github[.]io

This domain, udhay22r.github.io, presents a high-risk phishing threat by impersonating the udhay_mart retail platform. Analysis indicates the site is designed to deceive visitors into entering sensitive credentials or financial information under the guise of a legitimate shopping portal. The page title explicitly displays 'udhay_mart,' suggesting an attempt to mimic a trusted e-commerce brand, which is a common tactic in credential harvesting or payment fraud schemes. The infrastructure and content are structured to exploit user trust in familiar brand names, increasing the likelihood of successful compromise. Evidence supporting this assessment includes detection by 16 out of 95 security vendors on VirusTotal, with the domain appearing on two distinct security blocklists. The domain is registered through GitHub, Inc., leveraging GitHub Pages infrastructure, and resolves to the IP address 185.199.110.153, hosted under AS54113 (Fastly, Inc.). The SSL certificate is issued by Let's Encrypt (R12), a common practice among phishing sites to appear legitimate. Despite its malicious nature, the domain remains active, indicating ongoing risk to unsuspecting users. Users who have visited udhay22r.github.io or interacted with the site should immediately cease all engagement and take corrective actions. If credentials or payment details were entered, affected parties should change passwords for all associated accounts, enable multi-factor authentication where available, and monitor financial statements for unauthorized transactions. System scans using updated security tools are recommended to detect potential malware or follow-up threats. Organizations should consider blocking the domain and IP at the network level to prevent further exposure.