sohamvibhandik71[.]github[.]io

This domain, sohamvibhandik71.github.io, represents a high-risk phishing infrastructure leveraging GitHub Pages to conduct credential harvesting and social engineering attacks. Despite displaying a 'Site not found' error page, analysis indicates the underlying infrastructure remains active and configured for malicious operations. The domain specifically targets users through deceptive redirects or embedded links in phishing emails, exploiting the trust associated with GitHub's hosting platform to bypass initial suspicion. Infrastructure analysis reveals concrete indicators of compromise: the domain was registered through GitHub, Inc. on April 15, 2026, and resolves to the IP address 185.199.108.153, a known GitHub Pages endpoint. Security vendors have flagged this domain at a rate of 17/95 on VirusTotal, while it appears on one security blocklist and is explicitly marked as phishing by Google Safe Browsing. The SSL certificate, issued by Let's Encrypt (R12), provides a false sense of security, as encrypted connections are routinely abused in phishing campaigns to evade detection. Users who have visited sohamvibhandik71.github.io or interacted with content hosted on this domain should take immediate action. First, revoke any credentials entered on the site, particularly if login prompts or forms were presented. Second, scan the affected device using updated security tools to detect potential malware or browser-based exploits. Finally, monitor financial and communication accounts for unauthorized activity, as phishing domains of this nature often serve as initial access vectors for broader compromise. The domain remains active as of this advisory, underscoring the need for heightened vigilance.