manasgupta13116-netizen[.]github[.]io

This domain is flagged as a high-risk credential harvesting scam targeting users through social engineering tactics. Analysis indicates it operates under the generic_phishing threat type, designed to deceive victims into disclosing sensitive login details or personal information. Infrastructure analysis reveals the domain is registered through GitHub, Inc., and remains active as of this report. It resolves to the IP address 185.199.108.153, a known GitHub Pages hosting endpoint, and employs SSL encryption via Let's Encrypt. The domain appears on one security blocklist (OISD) and is flagged by Google Safe Browsing for SOCIAL_ENGINEERING. VirusTotal detection shows 12 out of 95 security vendors classify it as malicious. Technologies detected include Varnish, GitHub Pages, and Fastly, which are commonly used for both legitimate and malicious hosting. Mitigation requires immediate blocking of the domain and its associated IP address (185.199.108.153) at the network perimeter. Users should be advised to avoid interacting with any content hosted on manasgupta13116-netizen.github.io, particularly login prompts or forms requesting credentials. Security teams should monitor for indicators of compromise, including unusual outbound connections to the domain or IP, and conduct phishing awareness training emphasizing GitHub Pages-based threats. If credentials were entered, reset them immediately and enable multi-factor authentication on affected accounts.