shiven5968[.]github[.]io

PhishDestroy identifies shiven5968.github.io as an active generic phishing domain hosted on GitHub Pages, serving as a platform for credential theft and potential malware delivery vectors.

This domain was flagged by 11 of 95 VirusTotal security vendors, indicating elevated risk. It was registered through GitHub, Inc. with resolution to IP 185.199.108.153. The Let’s Encrypt SSL certificate suggests an attempt to establish trustworthiness, while the low detection rate implies ongoing evasion against automated scanning tools. No blocklist association or trust score data is publicly confirmed; creation date remains unverified.

Mitigation for generic phishing includes immediate browser isolation, credential rotation for exposed accounts, and disabling autofill for forms on this domain. Users should avoid interaction entirely—do not click, download, or input data. Organizations are advised to block the domain at DNS and firewall levels, investigate internal exposure, and alert users via phishing simulations. Enterprises may also report the domain to GitHub’s abuse team for takedown via abuse@github.com.