airranjeet21-spec[.]github[.]io

airranjeet21-spec.github.io is currently active and resolves to 185.199.108.153, an address belonging to GitHub Pages infrastructure. VirusTotal reports that 14 of 95 scanned security engines flag the domain, indicating a moderate consensus of malicious intent. The domain is listed on PhishDestroy and OpenPhish blocklists, and Google Safe Browsing categorises it as a social‑engineering threat. Registration details show the domain was created through GitHub, Inc., and the nameserver information is unavailable (NS_NOT_FOUND). The presence on two additional security blocklists corroborates the suspicion that the site is being used for phishing, although no page content has been publicly analysed. Defenders should add the domain to URL filtering and DNS sinkhole rules, monitor DNS queries for the 185.199.108.153 address, and consider extending detection signatures to cover GitHub‑hosted subdomains with similar threat indicators. Continuous re‑evaluation is advised as the site remains active and may evolve its payload.