Перевірка домену himeshverma.github.io на фішинг і безпеку

This domain, himeshverma.github.io, is identified as an active phishing site leveraging GitHub Pages infrastructure to conduct fraudulent activities. Analysis indicates the site employs generic phishing tactics, likely targeting users with fake login portals or credential harvesting schemes. No specific brand impersonation or crypto drainer kit signatures were detected in initial scans, though the domain’s structure and hosting choice suggest opportunistic exploitation of trusted platforms to deceive victims. The absence of visible content under the 'Site not found' page title may indicate cloaking techniques or a dormant phase awaiting activation. Infrastructure analysis reveals critical technical indicators: the domain is registered through GitHub, Inc., with a creation date of May 01, 2026, suggesting either a typo-squatting attempt or a pre-registered malicious asset. It resolves to IP address 185.199.108.153, located in the United States and associated with GitHub’s hosting infrastructure. The domain is flagged by Google Safe Browsing as phishing and appears on one security blocklist, while VirusTotal reports 7 out of 95 security vendors detecting it as malicious. The SSL certificate, issued by Let’s Encrypt (R12), provides a false sense of security, as encrypted connections do not mitigate the underlying threat. Current status remains active, with no takedown or mitigation observed as of this assessment. The domain’s persistence on GitHub Pages, despite detections, underscores the challenges in enforcing abuse policies on shared hosting platforms. Users are advised to block the domain at the network level and treat any communications or links referencing himeshverma.github.io as malicious. Organizations should monitor for credential submissions or redirects to this domain, particularly in logs associated with GitHub or developer-related workflows. The high-risk classification is upheld due to the combination of confirmed phishing activity, trusted infrastructure abuse, and cross-vendor detections.