vanshika2006rajput[.]github[.]io

vanshika2006rajput.github.io is identified as an active generic phishing domain exploiting GitHub Pages hosting to lure victims. While no specific brand impersonation is confirmed, the domain’s use in phishing attacks potentially aims to steal sensitive information from unsuspecting users. No specialized drainer kit is indicated, but the threat centers on social engineering tactics to deceive victims.

Technical analysis shows vanshika2006rajput.github.io has a VirusTotal detection rate of 13 out of 95 security vendors flagging it as malicious. It is registered through GitHub, Inc., and secured by a Let's Encrypt SSL certificate, which may lend a deceptive appearance of legitimacy. The domain resolves to IP address 185.199.108.153 and is flagged by Google Safe Browsing under the SOCIAL_ENGINEERING category. These indicators underscore its malicious intent and broad recognition by security entities.

Currently, vanshika2006rajput.github.io remains an active threat. Users and organizations are strongly advised to block access to this domain and monitor network traffic for connections to GitHub Pages domains used unexpectedly. Despite SSL protections, the site’s high-risk status and multiple security detections justify a defensive posture. Continued vigilance and reporting of suspicious activity related to this domain can help mitigate the phishing risk posed by vanshika2006rajput.github.io.