eatisam61[.]github[.]io

This domain, eatisam61.github.io, is flagged as a generic phishing site leveraging GitHub Pages infrastructure to impersonate legitimate services. Analysis indicates no explicit brand impersonation or crypto drainer kit association, but the domain exhibits characteristics consistent with credential harvesting or redirect-based phishing. The absence of a visible payload suggests the site may serve as a staging point for dynamic content delivery or a placeholder for future malicious campaigns. Infrastructure analysis reveals the domain resolves to 185.199.108.153, an IP address associated with GitHub, Inc. in the United States. The domain was registered on April 18, 2026, though this date appears anomalous given GitHub Pages' typical registration patterns. VirusTotal detection shows 6 out of 95 security vendors flagging the domain as malicious. The SSL certificate is issued by Let's Encrypt (R12), a common but not exclusive indicator of benign domains. The domain appears on one security blocklist (PhishDestroy) and is not currently listed in Google Safe Browsing. The page title, 'Site not found · GitHub Pages,' suggests either a misconfigured phishing page or an attempt to evade detection by mimicking a legitimate error state. Current status indicates the domain remains active, though no overt malicious content is visible at the time of analysis. The risk level is classified as high due to the combination of blocklist inclusion, VirusTotal detections, and the use of GitHub Pages for potential abuse. Response actions should include immediate blocking of the domain and IP address in enterprise and consumer security controls. Users are advised to treat any unexpected redirects or prompts from this domain as malicious and avoid entering credentials or downloading files. Continuous monitoring is recommended, as the domain may transition to active phishing operations without prior notice.