armankhan-12[.]github[.]io

PhishDestroy identifies armankhan-12.github.io as an active romance scam infrastructure deployed on GitHub Pages to harvest personal and financial data from unsuspecting victims. The site masquerades as a personal page while embedding fraudulent contact forms and payment requests under the guise of romantic relationships. Analysis of the infrastructure reveals consistent use of Let’s Encrypt SSL certificates to appear legitimate and a hosting footprint on GitHub’s IP range (185.199.108.153), which lends superficial credibility but does not mitigate the malicious intent. This domain was specifically crafted to exploit trust in recognized platforms and manipulate emotional vulnerabilities for financial gain.

This domain was flagged by security vendors with a detection rate of 3 out of 95 on VirusTotal, indicating limited but significant recognition of its malicious nature. It is registered through GitHub, Inc., which does not imply legitimacy but rather reflects the domain’s abuse of a trusted platform hosting service. The presence of a Let’s Encrypt SSL certificate further enhances its deceptive appearance, as browsers display the padlock icon without validating the underlying intent. While the domain itself is newly observed, its rapid deployment and thematic targeting strongly suggest coordinated campaign activity aimed at long-term exploitation rather than opportunistic fraud.

If you have visited armankhan-12.github.io, cease all communication immediately and avoid entering any personal, financial, or login information. Review your financial accounts for unauthorized transactions and enable multi-factor authentication on all critical services. Report the domain to your email provider, browser vendor, and local cybercrime units or fraud reporting platforms. Consider running a full antivirus scan and updating all passwords, especially those reused across platforms. Monitor credit reports for signs of identity theft. Exercise heightened caution when encountering unsolicited romantic or financial solicitations online, and verify identities through independent, secure channels before engaging in any transactions or sharing sensitive data.