sohamdarshak[.]github[.]io

PhishDestroy identifies sohamdarshak.github.io as a domain involved in a credential harvesting threat. The domain appears to be exploiting GitHub Pages hosting and a valid Let's Encrypt SSL certificate to lend legitimacy. No specific brand impersonation or credential drainer kit has been conclusively linked, but the activity fits common patterns of credential phishing attacks aimed at deceiving users into submitting sensitive login data.

Technical analysis reveals the domain has a VirusTotal detection score of 7 out of 95 engines, indicating no antivirus or antimalware engines currently flag it. It is registered through GitHub, Inc., which is a known platform for hosting static content including phishing pages. The domain resolves to IP address 185.199.108.153, associated with GitHub’s global content delivery infrastructure. There is no publicly available creation date in the dataset. Google Safe Browsing (GSB) status and blocklist counts are not mentioned, leaving those risk vectors uncertain.

As of the current evaluation, sohamdarshak.github.io remains active and unflagged by major scanners, presenting a concealed risk to internet users. Security teams and end users should exercise caution and avoid submitting credentials on the site. Immediate response actions involve monitoring the domain and reporting to GitHub for takedown requests. Users should employ additional protective measures such as two-factor authentication and domain reputation checks. The absence of detections despite the suspicious setup elevates the risk of successful compromises until mitigation occurs.