megharoy47[.]github[.]io

The domain megharoy47.github.io is currently flagged as an active generic phishing site. Analysis indicates this infrastructure is designed to impersonate legitimate brands, likely targeting user credentials through fraudulent login portals. While the visible page title displays 'Site not found · GitHub Pages,' this is often a tactic to evade automated detection while maintaining malicious backend functionality. Infrastructure analysis reveals the domain was created on March 26, 2026, and is registered through GitHub, Inc. It resolves to the IP address 185.199.108.153, located in the United States. The domain is secured with a Let's Encrypt SSL certificate (R12) and appears on one security blocklist. Notably, 8 of 95 security vendors on VirusTotal have flagged this domain as malicious, with detection rates suggesting persistent phishing activity despite the benign error page presentation. Current status remains active, with no evidence of takedown or remediation. Organizations are advised to block the domain and IP address at the network perimeter. Security teams should monitor for connections to 185.199.108.153 in logs, particularly from endpoints exhibiting unusual authentication attempts. Users should be educated to verify GitHub Pages URLs carefully, as this domain demonstrates how malicious actors exploit legitimate hosting services for credential theft campaigns.