sahuharikishor[.]github[.]io

The domain sahuharikishor.github.io has been identified as a high-risk credential theft phishing site. It is currently active and leverages GitHub Pages hosting to impersonate legitimate services in order to capture sensitive user credentials. There is no specific indication of a crypto drainer or brand impersonation kit, but the primary threat is the collection of login information for malicious use.

Technical indicators include a VirusTotal detection rate of 15 out of 95 security vendors marking this domain as malicious. The domain resolves to the IP address 185.199.108.153, which is a GitHub Pages IP. It was registered through GitHub, Inc. and secures connections via a Let's Encrypt SSL certificate. The domain is listed on one security blocklist and is actively blocked by OpenPhish. Despite these detections, the domain remains active and accessible online.

Given the persistent active status of sahuharikishor.github.io, users are strongly advised to refrain from entering any personal or login details on this site. Security teams should ensure this domain is added to internal blocklists and monitor for any related phishing campaigns. Continued vigilance is required as attackers may update the site or expand their tactics, maintaining a high risk for credential compromise.