sarthak050205[.]github[.]io

Analysis of the domain sarthak050205.github.io indicates active phishing infrastructure hosted on GitHub Pages as of July 29, 2026. The domain resolves to IP address 185.199.108.153, a GitHub-operated endpoint commonly used for legitimate static site hosting but also exploited for credential-harvesting campaigns. Infrastructure review shows the domain lacks configured nameservers, a non-standard configuration that may evade certain DNS-based security controls. Eleven of ninety-one security vendors on VirusTotal have flagged the domain, suggesting detection by multiple independent engines but not yet widespread consensus.

The domain appears on one security blocklist and is blocked by PhishDestroy, confirming its classification as malicious by at least one threat intelligence provider. No specific brand impersonation or phishing kit has been identified in available metadata; the exact content of the site remains unanalysed. GitHub, Inc. serves as the hosting registrar, providing the attacker with a low-cost, reputable platform that complicates takedown efforts due to GitHub’s legitimate use cases. Defenders should treat this domain as an elevated-risk credential harvester.

Network-level blocking is recommended for the domain and its resolving IP. Security teams should monitor for connections to 185.199.108.153 from internal assets, as this IP hosts multiple GitHub Pages sites and may be reused across campaigns. Further analysis of the page content is required to determine the targeted brand or service, but the current detection profile and hosting context support immediate containment.