gautamgocher2005[.]github[.]io

Analysis of the domain gautamgocher2005.github.io indicates active phishing infrastructure hosted on GitHub Pages. The domain is flagged by Google Safe Browsing for social engineering, a classification typically applied to deceptive sites designed to trick users into disclosing credentials or sensitive data. As of July 29, 2026, 15 of 91 security vendors on VirusTotal have detected this domain, suggesting cross-industry recognition of its malicious nature. The domain appears on one security blocklist and is actively blocked by PhishDestroy, further corroborating its high-risk status.

Infrastructure analysis reveals the domain resolves to 185.199.108.153, an IP address associated with GitHub's content delivery network. The domain is registered through GitHub, Inc., leveraging GitHub Pages for hosting, which is a common tactic to exploit legitimate services for malicious purposes. No nameservers are currently configured (NS_NOT_FOUND), which may indicate an incomplete or deliberately obscured DNS setup, though this does not impede resolution due to GitHub's hosting infrastructure. The exact content or brand impersonation of the site remains unconfirmed, as no page title, brand target, or phishing kit details are available in the current intelligence.

Defenders should treat this domain as a high-risk phishing endpoint, particularly given its hosting on a trusted platform. Recommended actions include blocking the domain at the DNS or proxy level, monitoring for connections to 185.199.108.153, and alerting users to potential credential harvesting attempts. Further analysis of the site's content is advised to determine the specific threat vector or targeted brand, though no visual or structural details are currently available for assessment.