sohamghadai42[.]github[.]io

PhishDestroy identifies sohamghadai42.github.io as a live credential-harvesting domain under active threat investigation. Registered via GitHub, Inc., this subdomain currently poses a moderate but unverified risk to unsuspecting visitors. All evidence suggests the site is engineered to mimic legitimate login portals, tricking users into surrendering sensitive credentials.

The domain was flagged by 17 of 95 VirusTotal vendors as of the last scan. It resolves to IP 185.199.108.153, hosts a Let’s Encrypt SSL certificate, and is served through GitHub’s Pages infrastructure. The blocklist count stands at 1, indicating early detection by the security community. With a current trust score of “under_investigation,” the site remains unrated for severity but is actively tagged as harmful.

Given its active status and placement on at least one reputable blocklist, PhishDestroy recommends blocking sohamghadai42.github.io at the network perimeter and advising end-users to refrain from clicking or submitting any data. Organizations should update firewall rules and endpoint policies to deny outbound connections to 185.199.108.153 and inspect any associated TLS handshakes for Let’s Encrypt certificates. Users who may have already entered credentials are urged to rotate passwords immediately and enable multi-factor authentication wherever possible.