unnatisharma03[.]github[.]io

This domain, unnatisharma03.github.io, is identified as a high-risk phishing site designed to harvest user credentials through fake login pages. Victims are typically redirected to this domain via malicious links in emails, social media, or compromised advertisements. The site mimics legitimate authentication portals, tricking users into entering sensitive information such as usernames, passwords, or multi-factor authentication codes. Analysis indicates the domain is actively targeting individuals across multiple sectors, with no specific industry focus observed. Infrastructure analysis reveals the domain is hosted on GitHub Pages, resolving to the IP address 185.199.108.153. It is flagged by 7 out of 95 security vendors on VirusTotal, including detections for generic phishing and credential theft. The SSL certificate is issued by Let's Encrypt, a common tactic to appear legitimate. The domain appears on one security blocklist and is currently unblocked by most major providers, increasing its potential reach. Registration details confirm it is managed through GitHub, Inc., a platform frequently abused for hosting malicious content due to its free and accessible nature. If a user has visited unnatisharma03.github.io or entered credentials on the site, immediate action is required. First, disconnect the affected device from the network to prevent further data exfiltration. Reset all passwords associated with accounts accessed during the session, prioritizing email, financial, and administrative credentials. Enable multi-factor authentication where available, using app-based or hardware tokens instead of SMS. Scan the device with updated security tools to detect and remove any malware or persistent threats. Monitor accounts for unauthorized activity and report the incident to relevant security teams or platforms for further mitigation.