# kanxcode.github.io — SUSPICIOUS

> PhishDestroy identifies kanxcode.github.io as a generic phishing page with 0/95 VirusTotal detections. Check the full report.

## Summary
PhishDestroy identifies kanxcode.github.io as a generic phishing domain currently under investigation for potential credential theft. The domain is active and flagged as a phishing page designed to mimic legitimate login portals to harvest user credentials. No specific brand impersonation has been confirmed at this stage, though the domain's structure suggests a broader phishing campaign targeting developers or users familiar with GitHub Pages.    

This domain was flagged by 0 of 95 VirusTotal vendors, indicating a low detection rate despite potential malicious intent. Registered through GitHub, Inc., it resolves to IP address 185.199.108.153 and operates under a Let's Encrypt SSL certificate for HTTPS encryption. The domain's registration and hosting infrastructure align with GitHub's legitimate services, which may be leveraged to evade suspicion. Historical data shows no prior blocklist entries, and trust scores for this domain remain unverified due to its recent activity. The absence of detections suggests this phishing attempt is still in early stages or employs evasion techniques to avoid automated detection.    

The current status of kanxcode.github.io remains under investigation, with no confirmed compromise of user credentials reported at this time. However, the domain's low detection rate and use of GitHub's infrastructure pose a significant risk to unsuspecting users. PhishDestroy recommends immediate scrutiny of any interactions with this domain, particularly if it requests login credentials or sensitive data. Users are advised to verify the domain's legitimacy through official GitHub channels, avoid entering credentials, and report suspicious activity to GitHub's abuse team. Organizations should monitor network traffic for connections to this IP and blocklist the domain proactively to prevent potential credential theft.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: GitHub, Inc.
- IP: 185.199.108.153

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/kanxcode.github.io
- PhishDestroy: https://phishdestroy.io/domain/kanxcode.github.io/
- LLM endpoint: https://phishdestroy.io/domain/kanxcode.github.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/kanxcode.github.io/
Last updated: 2026-04-05