uday-raj-gupta[.]github[.]io

PhishDestroy identifies uday-raj-gupta.github.io as an active credential-harvesting domain leveraging GitHub Pages to impersonate a legitimate service and steal user credentials. The site poses as a file-sharing or document portal, deploying a generic drainer kit to capture login details and session tokens. No specific brand is mimicked in known intelligence, indicating an opportunistic campaign targeting unsuspecting users under the guise of a professional GitHub-hosted page.

Technical indicators confirm this domain as malicious: VirusTotal reports a detection ratio of 16/95 security vendors, while Google Safe Browsing classifies it under SOCIAL_ENGINEERING. Resolving to IP 185.199.108.153, the domain is registered through GitHub, Inc. and secured with a Let's Encrypt SSL certificate. The unique seed identifier 9dd219 corresponds to this confirmed threat profile.

This domain remains active and poses a high risk to users who interact with its fraudulent login forms. PhishDestroy recommends immediate blocking of the domain and IP address. Users who have entered credentials should change passwords on all accounts and enable multi-factor authentication. Remaining risk is high due to the domain’s continued availability and the drainer kit’s potential to harvest further sensitive data.