surajsahu26[.]github[.]io

The domain surajsahu26.github.io is currently classified as an active generic phishing site with an elevated risk rating. Analysis of public threat‑intel sources shows that the domain resolves to the IP address 185.199.109.153, which is owned by the GitHub Pages hosting service. Registration details indicate the site was created through the GitHub Pages platform, a common vector for abuse because the service provides free TLS certificates and a shared IP infrastructure. VirusTotal has processed the domain and 13 of 91 scanned security vendors have returned a malicious classification, confirming that multiple independent engines detect phishing‑related behavior.

The domain is also listed on one external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, further evidencing its malicious intent. No additional data such as page title, SSL certificate fingerprint, or HTTP response codes are available in the current intelligence set, leaving the exact content and targeted victim profile unverified. The lack of deeper content analysis means that the specific phishing lure cannot be confirmed at this time.

Defenders should add the domain to network‑level deny lists, enforce DNS‑based filtering for the host, and monitor outbound connections to the associated IP address. Because the IP belongs to a shared hosting environment, care should be taken to avoid false positives for legitimate GitHub Pages sites; however, the vendor detection count and blocklist presence justify a precautionary block. Continuous re‑evaluation is recommended as new telemetry becomes available, particularly any changes in the page content, additional vendor detections, or expansion of blocklist coverage.