leelasaikodeti[.]github[.]io

This domain, leelasaikodeti.github.io, is actively engaged in credential theft operations designed to harvest login credentials from unsuspecting users. Analysis indicates the site mimics legitimate services, likely leveraging social engineering tactics to trick victims into entering sensitive information such as usernames, passwords, or multi-factor authentication codes. The infrastructure is hosted on GitHub Pages, a common vector for low-cost, high-impact phishing campaigns due to its free hosting and perceived legitimacy. No specific brand impersonation or crypto drainer kit has been conclusively identified, but the credential theft focus aligns with broader trends in account compromise schemes. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 185.199.108.153, a shared host within GitHub’s content delivery network. VirusTotal reports 0 out of 95 security vendors flagging the domain at the time of assessment, suggesting either evasion techniques or recent deployment. Google Safe Browsing has explicitly classified the site as phishing, providing a critical early warning despite the lack of broader blocklist coverage. The domain is registered through GitHub, Inc., with no publicly available creation date, limiting temporal analysis. No additional blocklist entries or sinkhole data were identified during the review. The site remains active as of the latest verification, posing an ongoing risk to users who may encounter it through phishing links in emails, social media, or malicious advertisements. Immediate response actions are recommended, including browser-based blocking, network-level filtering of the IP address, and user education to recognize credential theft tactics. Despite the low detection rate on VirusTotal, the Google Safe Browsing flag and active status warrant high-risk classification. Organizations should monitor for related indicators, such as similar GitHub Pages subdomains or IP-based connections to 185.199.108.153, to preemptively mitigate further exposure.