jeremykakumba[.]github[.]io

This domain, jeremykakumba.github.io, is flagged as a high-risk credential phishing site designed to harvest user login credentials. Analysis indicates the infrastructure mimics legitimate authentication portals, likely targeting unsuspecting users through social engineering tactics. No specific brand impersonation or crypto drainer kit signatures have been identified at this stage, though the site employs generic login forms commonly associated with credential theft operations.

Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 185.199.108.153, hosted on GitHub Pages infrastructure. VirusTotal reports 0 detections out of 95 engines, suggesting the phishing kit or payload remains undetected by most security vendors. Google Safe Browsing has explicitly flagged the domain as phishing. The domain is registered through GitHub, Inc., with no creation date publicly disclosed due to its hosting on a subdomain of github.io. No additional blocklist entries beyond Google Safe Browsing have been observed at this time.

The domain remains active as of the latest verification, with no takedown or mitigation measures implemented. Users are advised to avoid interaction with jeremykakumba.github.io and any associated links. Organizations should update web filtering rules to block access to the domain and its resolving IP address. Given the lack of detections on VirusTotal, reliance on traditional signature-based defenses may be insufficient; behavioral analysis and real-time URL inspection are recommended to mitigate exposure to this threat.