sakshipandey25[.]github[.]io

This domain is flagged as a high-risk credential harvesting site targeting users through deceptive login portals. Analysis indicates it operates under the guise of legitimate services to steal authentication credentials, financial details, or personal information. Infrastructure analysis reveals the domain sakshipandey25.github.io is currently active and resolves to the IP address 185.199.108.153, registered through GitHub, Inc. It appears on one security blocklist and is detected by 17 out of 95 security vendors on VirusTotal. The SSL certificate is issued by Let’s Encrypt, and the domain was created on April 19, 2026, an anomalous future date suggesting potential obfuscation. The page title, 'Site not found · GitHub Pages,' may indicate cloaking or a placeholder state. Additional technical indicators include a Gridinsoft trust score of 0/100 and the use of Varnish, GitHub Pages, and Fastly technologies. Mitigation steps for this threat type include blocking the domain and its resolving IP (185.199.108.153) at the network perimeter. Security teams should monitor for connections to this infrastructure, particularly from endpoints accessing sensitive systems. Users should be educated to recognize GitHub Pages-based phishing attempts, especially those mimicking login portals or financial services. If credentials were entered on this domain, immediate password resets and multi-factor authentication enforcement are recommended for affected accounts.