ipshita0607[.]github[.]io

This domain, ipshita0607.github.io, is identified as a high-risk phishing resource leveraging GitHub Pages infrastructure to deceive users. Analysis indicates the site employs generic phishing tactics, likely targeting credentials or personal data under the guise of a legitimate GitHub repository. While the visible page title reads 'Site not found · GitHub Pages,' historical or cloaked content suggests malicious intent, a common evasion technique in phishing campaigns. No specific brand impersonation or crypto drainer kit signatures were confirmed in this instance, though the domain’s behavior aligns with opportunistic credential harvesting. Technical indicators confirm the domain’s malicious classification. VirusTotal detection metrics report 15 out of 95 security vendors flagging the domain as phishing-related. The domain is registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, a known GitHub Pages hosting address located in the United States. Google Safe Browsing has explicitly marked the domain as phishing, and it appears on at least one security blocklist. The SSL certificate is issued by Let’s Encrypt (R12), a common but not exclusive indicator of legitimate sites, which attackers frequently exploit to lend false credibility. No domain creation date is publicly available due to GitHub’s subdomain registration model, though the active status and detection counts suggest recent malicious activity. The domain remains active as of this analysis, posing an ongoing risk to users who may encounter it through phishing links distributed via email, social media, or compromised websites. While the visible page displays a 'Site not found' error, threat actors may dynamically serve malicious content based on visitor profiles or referrer data. Users are advised to treat any interaction with this domain as suspicious, particularly if prompted for login credentials or sensitive information. Network-level blocking of the IP 185.199.108.153 and monitoring for related subdomains under github.io are recommended mitigation steps. Despite its benign appearance, the domain’s detection history and blocklist presence justify its high-risk classification.