abhinav-345[.]github[.]io

This domain, abhinav-345.github.io, is actively flagged as a generic phishing threat designed to harvest user credentials through deceptive login interfaces. Analysis indicates the site mimics legitimate authentication portals, likely targeting unsuspecting users who may enter sensitive information such as usernames, passwords, or session tokens. The infrastructure leverages GitHub Pages, a common hosting service for static content, which threat actors exploit due to its free availability and association with trusted domains like github.io. While the current page title displays 'Site not found,' this may indicate a temporary takedown of malicious content or a placeholder awaiting reactivation of phishing pages. Evidence supporting the malicious classification includes detection by 18 out of 95 security vendors on VirusTotal, with Google Safe Browsing explicitly flagging the domain as phishing. The domain was registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, a known GitHub Pages endpoint. Infrastructure analysis reveals the domain was created on April 14, 2026, though this future date suggests potential inaccuracies in registration metadata or deliberate obfuscation. The domain appears on one security blocklist, and its SSL certificate, issued by Let's Encrypt (R12), provides no inherent trust indicator beyond basic encryption. The combination of these factors—particularly the VirusTotal detection rate and blocklist inclusion—confirms the domain's high-risk status. Users who have visited abhinav-345.github.io should immediately cease all interaction and take corrective measures. If credentials were entered, reset passwords for all potentially compromised accounts, prioritizing those with administrative or financial access. Enable multi-factor authentication where available to mitigate unauthorized access. Examine browser history and local DNS cache for additional exposure to the domain or related IPs (e.g., 185.199.108.153). Monitor accounts for suspicious activity, such as unauthorized logins or transactions, and report the domain to relevant security teams for further investigation. Organizations should update web filtering policies to block the domain and its associated IP to prevent further exposure.