im-sravan[.]github[.]io

The domain im-sravan.github.io is identified as a credential theft scam and remains active as of the latest assessment. This domain impersonates a legitimate GitHub Pages site, but the page title 'Site not found · GitHub Pages' suggests a potential redirection or abuse of the GitHub Pages service for malicious purposes.

Infrastructure analysis reveals that im-sravan.github.io resolves to the IP address 185.199.111.153, which is located in the United States and is part of AS54113, Fastly, Inc. The domain is registered through GitHub, Inc., and uses a Let's Encrypt SSL certificate (R12). According to VirusTotal, 8 out of 95 security vendors flag this domain as malicious. Additionally, the domain appears on 1 security blocklist, specifically PhishDestroy, indicating that it has been recognized as a threat by at least one security community. The creation date of the domain is not specified, but the current status and the presence on blocklists suggest recent and ongoing activity.

Given the high risk level and the domain's active status, users are strongly advised to avoid interacting with im-sravan.github.io. Security professionals should monitor network traffic for any connections to this domain and consider implementing access controls to prevent access. Organizations that rely on GitHub Pages for their web presence should also be vigilant and ensure that their repositories are not being misused for similar purposes. Regularly updating security protocols and educating users on the signs of credential theft scams can further mitigate the risk associated with this domain.