rohit775-ux[.]github[.]io

The domain rohit775-ux.github.io is currently active and classified as a generic phishing threat. Analysis indicates it is designed to mimic legitimate login portals, likely targeting user credentials or sensitive authentication data. No specific brand impersonation has been confirmed, but the domain follows patterns consistent with credential-harvesting phishing campaigns. Infrastructure analysis reveals the domain is hosted on GitHub Pages, resolving to IP address 185.199.111.153. It appears on one security blocklist and is flagged by 11 of 95 security vendors on VirusTotal. The SSL certificate is issued by Let's Encrypt (R12), a common certificate authority for both legitimate and malicious domains. The registrar is GitHub, Inc., and the page currently returns a 'Site not found' title, suggesting the phishing content may have been removed or is served conditionally. Despite the inactive appearance, the domain remains a high-risk indicator due to its blocklist presence and vendor detections. Organizations should block this domain at the network perimeter and monitor for connections from internal assets. Security teams are advised to review logs for prior interactions with 185.199.111.153 and investigate any credential submissions associated with this domain. End users should be alerted to avoid entering credentials on any site linked to rohit775-ux.github.io, even if the page appears inactive.