somesubhranayak[.]github[.]io

On July 29, 2026 the domain somesubhranayak.github.io was identified as an active generic phishing infrastructure with a high risk rating. The site is hosted on GitHub Pages, a service that provides free static web hosting under the github.io sub‑domain. DNS resolution points to the IP address 185.199.109.153, which belongs to GitHub’s content‑delivery network and is shared by many legitimate projects. Google Safe Browsing has classified the URL as a social‑engineering threat, indicating that the content is designed to deceive users into disclosing credentials or personal data.

VirusTotal reports that 17 out of 91 scanning engines have flagged the domain, reinforcing the suspicion of malicious activity. The domain is also listed on a public security blocklist, and PhishDestroy has explicitly blocked it, confirming that at least one anti‑phishing feed has recognized the threat. The available data does not include a page title, SSL certificate details, HTTP response codes, or any observed brand‑specific lure, so the precise lure vector remains unknown. Likewise, no information is provided about the underlying phishing kit or the target audience.

Analysts should therefore treat any traffic to the domain as potentially malicious and advise users to avoid clicking links that resolve to this host. Defensive actions include adding the domain to network‑level blocklists, updating endpoint protection signatures, and monitoring DNS queries for the 185.199.109.153 address. Continuous observation of the domain’s status on VirusTotal and Google Safe Browsing is recommended, as additional detections may emerge. Organizations employing web‑filtering solutions should ensure the domain is denied, and any emails that reference the subdomain should be flagged for further investigation.