abhinavsingh1404[.]github[.]io

The domain abhinavsingh1404.github.io is currently active and flagged as a generic phishing site. Analysis indicates the threat does not impersonate a specific brand but instead leverages GitHub Pages infrastructure to host fraudulent content designed to harvest user credentials or distribute malicious payloads. The domain remains operational despite detection by multiple security mechanisms, posing a persistent risk to unsuspecting visitors. Infrastructure analysis reveals the domain was created on May 02, 2026, and is registered through GitHub, Inc. It resolves to the IP address 185.199.109.153, located in the United States and associated with GitHub’s hosting services. The SSL certificate is issued by Let’s Encrypt (R12), a common but not inherently malicious provider. Security vendors on VirusTotal flag the domain at a rate of 15 out of 95, indicating moderate to high confidence in its malicious nature. The domain appears on one security blocklist, and Google Safe Browsing explicitly categorizes it as phishing. The page title, 'Site not found · GitHub Pages,' suggests an attempt to mimic legitimate GitHub Pages errors while concealing malicious activity. Current status confirms the domain remains active, with no takedown or mitigation efforts observed as of this report. Organizations and individuals are advised to block the domain and its associated IP address (185.199.109.153) at the network perimeter. Endpoint protection solutions should be updated to include this domain in deny lists. Users who may have interacted with the domain should immediately reset credentials for any accounts accessed during the exposure window. Continuous monitoring of GitHub Pages-hosted domains is recommended, as threat actors frequently exploit legitimate hosting services to evade detection.