sandeepnani0902[.]github[.]io

The domain sandeepnani0902.github.io is currently flagged as an active generic phishing site with an elevated risk rating. Infrastructure analysis confirms that the domain resolves to IP address 185.199.111.153, which is owned by GitHub, Inc., indicating that the site is hosted on GitHub Pages. Registration metadata shows the registrar as GitHub, Inc., and the nameserver information is unavailable (NS_NOT_FOUND), limiting visibility into the underlying DNS configuration. The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, demonstrating that at least one trusted anti‑phishing feed has identified it as malicious.

VirusTotal scans report that 13 of 91 security vendors have flagged the domain, providing modest but notable consensus among detection engines that the site hosts phishing content. No additional intelligence such as Safe Browsing alerts, OTX mentions, SSL details, HTTP status codes, or page‑title metadata is available at this time, leaving many content‑level characteristics unverified. Defenders should prioritize adding the domain to network‑level deny lists and ensure endpoint protection solutions ingest the VirusTotal detection count.

Continuous monitoring of the IP address 185.199.111.153 for new GitHub‑hosted phishing artifacts is advised, as the shared hosting environment may be reused for other malicious pages. Further investigation should focus on retrieving the actual page content, confirming the presence of credential‑stealing forms, and correlating any observed traffic with internal user activity to assess potential compromise. Until more detailed payload information is gathered, the recommended posture is to block the domain outright and alert users about the risk of unsolicited links that resolve to GitHub‑hosted URLs.