kennynaty1662-del[.]github[.]io

This domain, kennynaty1662-del.github.io, operates as a credential harvesting platform under the guise of a legitimate GitHub Pages repository. Analysis indicates the infrastructure is designed to mimic trusted GitHub Pages environments, likely targeting users who expect to encounter official project documentation or software repositories. The site may present fake login prompts, cloned authentication portals, or malicious download links to capture sensitive credentials, including usernames, passwords, and session tokens. Given the domain's hosting on GitHub's infrastructure, it exploits the inherent trust associated with GitHub's brand to lower user vigilance and increase the likelihood of successful compromise. Evidence supporting the malicious classification includes detection by 17 out of 95 security vendors on VirusTotal, with Google Safe Browsing explicitly flagging the domain as phishing. The domain was registered through GitHub, Inc. on April 04, 2026, and currently resolves to the IP address 185.199.108.153, a known GitHub Pages hosting endpoint located in the United States. Despite the benign page title 'Site not found · GitHub Pages,' the domain appears on one security blocklist and is actively blocked by PhishDestroy. The SSL certificate, issued by Let's Encrypt (R12), further obfuscates the threat by providing HTTPS encryption, which may mislead users into perceiving the site as secure. Users who have visited kennynaty1662-del.github.io should immediately revoke any credentials entered on the site, particularly those associated with GitHub, software development platforms, or single sign-on services. It is recommended to scan the device for malware using updated security tools and monitor accounts for unauthorized access or anomalous activity. If the domain was accessed in a corporate environment, incident response protocols should be initiated to assess potential data exposure. Given the domain's active status and high-risk classification, organizations should update web filtering rules to block access to kennynaty1662-del.github.io and conduct awareness training to educate users on identifying similar phishing attempts leveraging trusted hosting services.