shivam-pal07[.]github[.]io

This domain, shivam-pal07.github.io, is flagged as a high-risk phishing resource targeting users through a GitHub Pages facade. Analysis indicates no direct brand impersonation (e.g., Microsoft, PayPal) or crypto drainer kit signatures, but the infrastructure mimics legitimate GitHub Pages to deceive victims into disclosing credentials or executing malicious actions. The page title 'Site not found' suggests either a staging environment, a takedown placeholder, or a cloaking mechanism to evade automated detection while maintaining server control. Technical indicators confirm the domain's malicious classification. VirusTotal reports 18 out of 95 security vendors flagging the domain as phishing, with Google Safe Browsing explicitly labeling it as such. The domain is registered through GitHub, Inc., resolving to IP address 185.199.108.153 (US-based GitHub infrastructure). The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites. The domain appears on one security blocklist, and while the current page displays a 'Site not found' error, the underlying threat remains active. Current status shows the domain is still operational, though the visible content does not expose active phishing forms. Response actions by GitHub or hosting providers are not publicly documented, leaving the infrastructure intact. The remaining risk is elevated due to the domain's persistence, GitHub's hosting reputation, and the potential for reactivation. Users are advised to block the domain at the network level, monitor for redirects to this endpoint, and verify GitHub Pages URLs for authenticity before interaction. Security teams should treat this domain as a persistent threat vector until GitHub confirms remediation.