ramcharan2703[.]github[.]io

This investigation documents the domain ramcharan2703.github.io, observed as a high‑risk generic phishing infrastructure as of 18 July 2026. The domain is registered through GitHub, Inc., indicating it is a GitHub Pages site. DNS resolution returns the IP address 185.199.108.153, which belongs to the GitHub Pages hosting range. No authoritative nameserver records were retrieved (NS_NOT_FOUND). VirusTotal analysis shows that three of ninety‑one scanned security vendors flagged the domain, providing independent confirmation of malicious activity. The domain remains active at the time of reporting. Available evidence confirms that the site is being leveraged for phishing, but the specific target brand, page content, or credential‑capture mechanisms have not been publicly released. Consequently, the precise lures and victim profile remain uncertain. The combination of a GitHub‑hosted domain, active status, and multiple vendor detections justifies a high risk rating. Defenders should include ramcharan2703.github.io in URL filtering and blocklists, monitor outbound DNS queries for the associated IP address, and enforce strict email authentication to reduce successful phishing attempts. Continuous re‑scanning on VirusTotal or similar platforms is recommended to capture any new detections.