anchal-pal[.]github[.]io

PhishDestroy identifies anchal-pal.github.io as a live credential-harvesting phishing domain currently active and elevated-risk. The domain impersonates no specific brand; instead it presents a generic login lure designed to steal user credentials. Confirmed malicious status is supported by continuous uptime and multiple blocklist detections. The domain resolves to IPv4 address 185.199.108.153 via GitHub Pages hosting. Security telemetry shows 15 of 95 VirusTotal vendors flagging the domain, while OpenPhish and PhishingDB have already added it to their blocklists. The Let’s Encrypt SSL certificate enables covert HTTPS traffic, masking malicious intent. Registered through GitHub, Inc., the site leverages the platform’s trust reputation to bypass initial scrutiny. Trust scores remain low across multiple threat intelligence feeds, reinforcing its malicious classification. Users should immediately block ingress/egress traffic to anchal-pal.github.io at the network perimeter and browser level. Employees are advised to avoid visiting the domain and report any accidental access incidents through established incident response channels. Security teams should hunt for indicators linked to 185.199.108.153 and review authentication logs for anomalous login attempts originating from this campaign.