gangasagarg1114-commits[.]github[.]io

The domain gangasagarg1114-commits.github.io is currently active and is classified as a high‑risk generic phishing infrastructure. Registration details show the domain was created through GitHub, Inc., and the authoritative name servers are not resolvable (NS_NOT_FOUND). DNS resolution points to IP address 185.199.108.153, an IP range commonly associated with GitHub Pages hosting.

The site has been added to two public blocklists and is flagged by both PhishDestroy and OpenPhish, indicating that at least two reputable anti‑phishing feeds have identified malicious use. VirusTotal analysis reports that nine out of ninety‑one scanned security vendors flagged the domain, reinforcing the suspicion of malicious activity. No additional data such as page title, SSL certificate details, or explicit brand targeting is available, so the exact lure or credential‑stealing technique remains unknown.

Defenders should immediately block traffic to the domain and its resolved IP address at network perimeters, update proxy and DNS filtering rules to include the two known blocklists, and monitor for any outbound connections to GitHub Pages infrastructure that may be leveraged for similar campaigns. Continuous enrichment from threat‑intel platforms is advised to capture any future attribution, such as the appearance of a specific brand name in page metadata or the deployment of known phishing kits. Given the high risk rating and active status, proactive containment and ongoing observation are recommended.