shivu-shivamurthy-a[.]github[.]io

This domain, shivu-shivamurthy-a.github.io, is flagged as a high-risk generic phishing resource. Analysis indicates the page masquerades as a legitimate GitHub Pages endpoint, though no specific brand impersonation or crypto drainer kit signatures have been identified in initial scans. The threat appears to leverage GitHub's hosting infrastructure to distribute malicious content, a tactic increasingly observed in phishing campaigns targeting developers and end-users alike. The absence of a visible payload suggests either a staging environment or a dynamically loaded attack vector, which may evade static detection mechanisms. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 185.199.108.153, associated with GitHub, Inc. in the United States. The domain was registered through GitHub, Inc. on April 28, 2026, though this date may reflect an administrative placeholder rather than actual deployment. VirusTotal reports 7 out of 95 security vendors flagging the domain, while only one blocklist (PhishDestroy) currently includes it. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites due to its accessibility. No detections were reported in Google Safe Browsing at the time of analysis, highlighting potential gaps in cross-platform coverage. The domain remains active as of the latest verification, posing an ongoing risk to users who may encounter it through phishing links or compromised redirects. Response actions should include immediate reporting to GitHub's abuse channels to facilitate takedown, as well as submission to additional blocklists to improve detection coverage. Users are advised to avoid interacting with the domain, particularly if accessed via unsolicited communications. Organizations should update web filters to block the domain and its resolving IP, while monitoring for related indicators of compromise, such as secondary domains or IP ranges associated with the same registrar or hosting provider.