somya-jangid[.]github[.]io

This domain, somya-jangid.github.io, is identified as a high-risk phishing resource hosted on GitHub Pages infrastructure. Analysis indicates no direct brand impersonation or crypto drainer kit association, but the site exhibits characteristics of a generic phishing page designed to harvest credentials or sensitive information. The absence of a functional page (displaying 'Site not found') suggests either a placeholder for future malicious activity or a remnant of a dismantled phishing campaign, though underlying infrastructure remains active and flagged by security systems. Technical indicators confirm the domain's malicious classification. VirusTotal reports 14 out of 95 security vendors flagging the domain as phishing-related, while Google Safe Browsing explicitly designates it as a phishing threat. The domain resolves to the IP address 185.199.109.153, registered under GitHub, Inc., and is hosted within the United States. It appears on at least one security blocklist, and its SSL certificate is issued by Let's Encrypt (R12). The page title, 'Site not found · GitHub Pages,' aligns with GitHub's default error messaging, though this does not mitigate the domain's malicious status. Current status remains active, with no evidence of takedown or remediation. While the visible page content is benign, the domain's inclusion on security blocklists and vendor detections indicates persistent risk. Users and organizations are advised to block access to this domain at the network level, monitor for related subdomains or redirects, and verify any unexpected communications originating from GitHub Pages infrastructure. The domain's hosting on legitimate cloud services underscores the need for continuous scrutiny of third-party platforms exploited for phishing operations.