aniketkum2025[.]github[.]io

This domain, aniketkum2025.github.io, is actively flagged as a high-risk phishing site hosted on GitHub Pages infrastructure. Analysis indicates it resolves to IP address 185.199.108.153, a known GitHub Pages hosting endpoint, which aligns with its registration through GitHub, Inc. Despite its legitimate hosting origin, the domain lacks configured nameservers, a common red flag in phishing operations leveraging free hosting services. Google Safe Browsing has classified the site as engaging in social engineering, a designation consistent with phishing activity aimed at deceiving users into divulging sensitive information. Security vendor assessments further corroborate the threat: 14 of 91 engines on VirusTotal detect the domain as malicious, and it appears on at least one security blocklist.

The absence of nameservers (reported as NS_NOT_FOUND) may indicate an attempt to evade detection or misconfigured infrastructure, though this is not definitive proof of malicious intent on its own. The domain's hosting on GitHub Pages complicates attribution, as the platform is frequently abused for phishing due to its free, trusted nature and lack of upfront verification. Defenders should treat this domain as active and high-risk.

Blocking access at the network level is recommended, particularly given its presence on PhishDestroy's blocklist. While the exact content or targeted brand is not yet analysed, the combination of social engineering flags, vendor detections, and hosting anomalies provides sufficient evidence to classify this as a credible phishing threat. Organizations using GitHub Pages for legitimate purposes should monitor for similar abuse patterns, such as newly created repositories with suspicious naming conventions or domains resolving to GitHub's IP ranges without proper DNS configurations.