abhinav962173[.]github[.]io

Analysis of abhinav962173.github.io on August 04, 2026 indicates this domain is an active phishing endpoint hosted on GitHub Pages infrastructure. The domain resolves to 185.199.108.153, an IP address assigned to GitHub, Inc., consistent with legitimate GitHub Pages hosting. However, the domain appears on one security blocklist (PhishDestroy) and is flagged by 15 of 91 security vendors on VirusTotal, confirming detection by multiple threat intelligence sources. The SSL certificate is issued by Let's Encrypt (YR2), a common certificate authority for both legitimate and malicious sites, providing no definitive indication of intent.

No nameservers are configured (NS_NOT_FOUND), which may suggest recent deployment or an attempt to obscure DNS-level tracking. The domain remains active as of the report date, with no evidence of takedown or mitigation. While the exact content or targeted brand is not specified in available data, the classification as 'generic phishing' and the use of GitHub Pages infrastructure align with common adversary tactics for low-cost, disposable phishing sites.

Defenders should treat this domain as high-risk and consider blocking or monitoring access to 185.199.108.153 and the domain itself. Further investigation into the hosted content is recommended to identify the specific phishing campaign or targeted service. The domain's reliance on GitHub's hosting may limit its persistence, but its current active status warrants immediate attention.