tdeepti548[.]github[.]io

tdeepti548.github.io is a generic phishing domain under active investigation. Hosted on GitHub Pages, this domain poses a social engineering threat, leveraging deceptive content to trick users into disclosing sensitive information. No specific brand impersonation or drainer kit was identified during initial analysis, but the page’s purpose aligns with credential harvesting or malware distribution tactics commonly observed in generic phishing campaigns.

This domain resolves to IP 185.199.108.153 and was registered through GitHub, Inc. VirusTotal currently reports 17/95 detections, indicating it remains undetected by most antivirus engines. Google Safe Browsing has flagged the domain under the SOCIAL_ENGINEERING category, and it is listed on 1 known security blocklist, including OpenPhish. The SSL certificate, issued by Let's Encrypt, suggests an attempt to appear legitimate through encrypted connections. However, the absence of detections and the use of a free hosting service like GitHub Pages raise concerns about its rapid deployment and potential for evasion.

This domain is currently active and blocked by OpenPhish. Threat intelligence indicates ongoing monitoring with a risk level classified as under_investigation. Users should avoid accessing tdeepti548.github.io and report any suspicious activity. Organizations are advised to block the domain and IP 185.199.108.153 at the network perimeter. Remaining risk is moderate due to the domain’s recent deployment, low detection rate, and reliance on free hosting infrastructure, which complicates takedown efforts.