botkesaksham[.]github[.]io

PhishDestroy identifies botkesaksham.github.io as an active phishing domain leveraging GitHub Pages infrastructure to deceive users. The site poses as a generic service to harvest login credentials or sensitive data, with no discernible association to a specific brand or drainer kit. GitHub's hosting platform is exploited here, enabling rapid deployment and evasion of traditional takedown measures. This domain resolves to IP 185.199.108.153 and was registered through GitHub, Inc. Security telemetry indicates a VirusTotal detection ratio of 14/95 vendors, while it appears on 1 blocklist and is flagged by PhishingDB. Let's Encrypt provides the SSL certificate, adding a veneer of legitimacy to the operation. These technical indicators confirm the domain's malicious intent and operational status. Currently, botkesaksham.github.io remains active despite detection efforts. Immediate actions include blocking the domain at the network perimeter and updating endpoint defenses to prevent user access. While the risk remains elevated due to GitHub's legitimate infrastructure being misused, proactive blocking mitigates exposure. Users should exercise caution when encountering unsolicited links referencing this domain.