shivamshelke-dev[.]github[.]io

PhishDestroy identifies shivamshelke-dev.github.io as a confirmed generic phishing site currently active and posing a high risk to users. Although it does not impersonate a specific brand, its design and behavior indicate it is used for credential theft or other phishing attacks.

The domain was created on April 15, 2026, and resolves to the IP address 185.199.108.153, which is associated with GitHub Pages. It is registered through GitHub, Inc. and uses a Let's Encrypt SSL certificate (R12). The page title reads "Site not found · GitHub Pages," which is a default GitHub Pages error page, suggesting the page might be used as a landing page or is dynamically served. Importantly, 11 out of 95 security vendors on VirusTotal flag this domain as malicious, and it appears on 1 security blocklist. These indicators, combined with the domain's recent creation and high risk level, strongly suggest malicious intent.

As of the latest assessment, the site remains active and continues to present a threat. PhishDestroy recommends that users avoid interacting with this domain entirely. Organizations should block access to shivamshelke-dev.github.io at the network level and educate users about recognizing phishing attempts, especially those hosted on legitimate platforms like GitHub Pages. If any credentials were entered on this site, they should be changed immediately and monitored for unauthorized use.