sakshampan733-cloud[.]github[.]io

Analysis indicates that sakshampan733-cloud.github.io is currently active and resolves to the IP address 185.199.108.153, a host commonly associated with GitHub Pages infrastructure. The domain was registered through GitHub, Inc., and no custom nameserver records are available, suggesting it relies on the default GitHub DNS configuration. The threat classification is generic_phishing, and the risk level is under investigation, reflecting limited visibility into the payload or credential‑stealing mechanisms employed. Concrete evidence consists solely of the DNS resolution and registration details; no content, page title, or malware detection data have been observed. Uncertainty remains regarding the specific lures or credential‑capture forms hosted on the site, as no page analysis or external scanning results are present. Defenders should treat the domain as potentially malicious, apply URL filtering or blocklists to prevent user access, and prioritize deeper forensic examination of any traffic to the IP address. Continuous monitoring for changes in DNS records, hosting patterns, or emergence of detection signatures is advised, as well as coordination with hosting providers to obtain additional forensic artifacts if the site is confirmed to be used for credential harvesting.