shreypatel2327[.]github[.]io

Analysis of shreypatel2327.github.io indicates a high-risk phishing domain hosted on GitHub Pages infrastructure. The domain, registered on May 6, 2024, resolves to 185.199.110.153 and presents itself as a personal portfolio under the title 'Shrey's Portfolio.' Despite the benign page title, the domain is flagged by 13 of 95 security vendors in aggregated scans and appears on two security blocklists, including PhishDestroy and PhishingDB. The site employs standard web technologies such as React, Varnish, and Cloudflare, alongside Google Analytics and Google AdSense, which may be used to track victim interactions or monetize traffic. The SSL certificate is issued by Let's Encrypt, providing HTTPS encryption, a common tactic to lend legitimacy to phishing pages. Infrastructure analysis reveals the domain is hosted on GitHub Pages, a platform frequently abused for phishing due to its free hosting and reputable origin. The Gridinsoft trust score of 0/100 further corroborates the malicious classification. While the exact nature of the phishing content remains unconfirmed due to lack of direct page analysis, the combination of blocklist presence, vendor detections, and hosting context strongly suggests credential harvesting or distribution of malicious payloads. Defenders should treat this domain as active and high-risk, blocking resolution at the network level and monitoring for connections from internal assets. No specific brand impersonation is identified in available data, though the portfolio guise may be used to target individuals in professional or academic contexts.