rathorepranjal[.]github[.]io

PhishDestroy identifies the site hosted at rathorepranjal.github.io as a browser-update phishing page designed to trick visitors into downloading malware disguised as a software update. When loaded in a browser, the page displays urgent messages such as “Your browser is outdated” or “Critical security patch required,” prompting users to click a fake update button. Behind the scenes, clicking the button typically triggers the download of a malicious executable or script that can steal credentials, install keyloggers, or open backdoors on the victim’s device, making this a high-stakes social-engineering trap rather than a simple annoyance.

This domain was flagged by 15 out of 95 VirusTotal security vendors exactly as a browser-update phishing page. It was created as a GitHub Pages site under the user rathorepranjal on GitHub, Inc., and currently resolves to the IP address 185.199.108.153. Let’s Encrypt supplies a valid SSL certificate, giving the page a deceptive veneer of legitimacy. While GitHub Pages itself is a legitimate hosting service, attackers frequently abuse it to host phishing kits and fake update pages that appear to come from trusted domains, leveraging the platform’s good reputation to bypass browser warnings. The combination of a convincing appearance, a valid certificate, and the familiar github.io domain suffix lowers user suspicion and increases the likelihood of successful compromise.

If you visited rathorepranjal.github.io and saw any pop-ups or messages urging you to “update your browser immediately,” do not click anything—close the tab or window right away. If you downloaded a file from the page, do not open it; instead, run a full antivirus scan on your device using a trusted security suite. You should also reset any saved browser passwords and enable multi-factor authentication wherever possible. Report the domain to your antivirus provider and consider running an online scan at VirusTotal using the URL https://rathorepranjal.github.io to confirm its status. Even though the SSL certificate appears valid, it cannot guarantee the safety of the site’s content—treat unexpected update prompts as red flags and always verify by visiting the software vendor’s official website directly.