sahil-r-sahu[.]github[.]io

PhishDestroy identifies sahil-r-sahu.github.io as an active credential-harvesting page designed to trick users into surrendering sensitive login details. This GitHub-hosted domain (resolving to 185.199.108.153) is already detected by 13 of 95 VirusTotal security vendors, indicating widespread consensus on its malicious nature. The site uses a Let’s Encrypt SSL certificate to appear legitimate, but its purpose is to harvest usernames, passwords, or other personal data. This domain was registered through GitHub, Inc., which is unusual for a phishing operation, as threat actors often abuse free hosting to lower operational costs and evade takedowns. With 13 security vendors already flagging the page, the risk of exposure is clear. GitHub has not yet intervened, keeping the threat active. If you visited sahil-r-sahu.github.io: do not enter any credentials. Change passwords for any accounts you may have typed in, and enable two-factor authentication where possible. Report the domain to your IT team or security provider, and avoid any future interactions. Use trusted login portals and verify URLs before submitting sensitive data.