khansamansuri1-source[.]github[.]io

The domain khansamansuri1-source.github.io is currently active and has been classified with a high risk rating for generic phishing. Infrastructure analysis shows the domain is registered through GitHub, Inc. and resolves to the IP address 185.199.108.153, which is part of GitHub’s static content hosting network. No authoritative nameserver records were returned, indicating that standard DNS delegation data is unavailable.

The domain has been added to a single security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its malicious status. Google Safe Browsing has flagged the site for social engineering, a category that aligns with phishing behavior. VirusTotal scans report that 13 of 91 security vendors have raised detections for the domain, providing additional corroboration of its malicious nature.

While the exact phishing payload, target brand, or page title have not been disclosed in the available intelligence, the combination of blocklist inclusion, Safe Browsing flag, and multi‑vendor detections constitutes strong evidence of a phishing operation. Defenders should block or sinkhole the domain at network perimeter, update URL filtering policies to include the host, and monitor outbound traffic for connections to 185.199.108.153. Continuous re‑evaluation is advised, as further analysis of the hosted content could reveal additional indicators of compromise or victim targeting patterns.