saugatp166-svg[.]github[.]io

The domain saugatp166-svg.github.io is currently active and resolves to the IP address 185.199.108.153. Registration information shows that the domain is hosted by GitHub, Inc., which is typical for user‑generated content platforms and does not inherently indicate malicious intent. However, the domain has been flagged by seven of ninety‑one security vendors on VirusTotal, indicating that a minority of scanners have identified malicious characteristics. It appears on two public phishing blocklists and is explicitly listed as blocked by both PhishDestroy and OpenPhish.

The domain’s nameserver data could not be retrieved (NS_NOT_FOUND), which limits visibility into its DNS configuration. No publicly available Safe Browsing, Open Threat Exchange, SSL certificate, HTTP status code, or page‑title information has been reported for this host. The limited detection count, combined with inclusion on reputable blocklists, suggests that the domain is being used for a high‑risk phishing campaign despite a relatively low vendor detection rate.

Defenders should add saugatp166-svg.github.io to URL filtering policies, enforce DNS‑based blocklisting, and monitor outbound traffic for connections to 185.199.108.153. Where possible, integrate the domain into existing phishing‑detection feeds to improve early warning capability. Continuous re‑evaluation is advised, as additional analysis of the hosted content may reveal further indicators of compromise or clarify the specific credential‑harvesting tactics employed.