shanyakakkar[.]github[.]io

This domain, shanyakakkar.github.io, is an active phishing site designed to mimic legitimate login portals. Users who visit this page may be tricked into entering sensitive credentials, such as usernames, passwords, or financial details, which are then harvested by threat actors. The site is hosted on GitHub Pages infrastructure, a tactic often used to lend false credibility to malicious content. While the page currently displays a 'Site not found' message, this may be a temporary state or a cloaking technique to evade detection. Analysis indicates this domain is flagged by 13 out of 95 security vendors on VirusTotal, a clear indicator of malicious activity. The domain was created on April 15, 2026, though this date may reflect a typo or manipulation, as it appears to be set in the future. It is registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, a known GitHub Pages hosting IP located in the United States. The SSL certificate is issued by Let's Encrypt, a common but easily obtainable certificate authority, which does not guarantee the site's legitimacy. The domain appears on at least one security blocklist and is actively monitored for phishing activity. If you or someone you know has visited shanyakakkar.github.io, immediate action is required. First, do not enter any personal information or credentials on the site. If credentials were already submitted, change the passwords for all affected accounts, starting with email, banking, and other high-value services. Enable multi-factor authentication (MFA) wherever possible to add an extra layer of security. Monitor accounts for unauthorized activity, such as logins from unfamiliar locations or devices, and report any suspicious transactions. Additionally, scan the device used to access the site for malware, as phishing pages may deploy additional payloads. Finally, report the domain to your organization's security team or a trusted threat intelligence platform to help prevent further exploitation.