tanmoypanda2007-prog[.]github[.]io

Analysis of tanmoypanda2007-prog.github.io as of July 29, 2026, confirms this domain is an active phishing site hosted on GitHub Pages infrastructure. The domain resolves to 185.199.110.153, an IP address associated with GitHub's content delivery network, and was registered through GitHub Pages, a legitimate service often exploited for phishing due to its free hosting and SSL certificates. Seventeen out of ninety-one security vendors on VirusTotal flag this domain, indicating detection by multiple engines, though the specific phishing kit or targeted brand remains unconfirmed. The domain appears on at least one security blocklist and is explicitly blocked by PhishDestroy, a specialized anti-phishing service.

Google Safe Browsing categorizes the threat as social engineering, suggesting the site likely attempts to deceive users into divulging credentials or sensitive information. No additional details about the page content, such as the title or targeted brand, are available in the current intelligence. The use of GitHub Pages for phishing is a known tactic, as it provides a low-cost, high-trust facade that can evade initial scrutiny. Defenders should treat this domain as high-risk and prioritize blocking it at the DNS or proxy level.

Network security teams are advised to monitor for connections to 185.199.110.153, particularly from endpoints that do not typically interact with GitHub Pages. If internal logs show user visits to this domain, immediate credential resets and device scans are recommended, as the site's social engineering tactics may have already compromised accounts. Further investigation into the domain's content and any linked infrastructure is warranted to determine the full scope of the threat.