akankshanetkar-ux[.]github[.]io

On July 29 2026 the domain akankshanetkar-ux.github.io was observed actively hosting a generic phishing campaign. The domain is provisioned via GitHub Pages, a free static‑site service, and resolves to the IP address 185.199.111.153, which belongs to the GitHub infrastructure. VirusTotal has recorded 15 detections out of 91 scanned scanners, indicating that multiple anti‑malware engines consider the domain malicious. The domain is listed on one external blocklist and has been blocked by the PhishDestroy sinkhole, confirming that it is already being intercepted by at least one defensive network.

The available intelligence does not contain a page title, TLS certificate details, or any disclosed target brand, so the exact content served by the site remains unknown. No Safe Browsing or Open Threat Exchange (OTX) entries are referenced in the supplied data, and no additional intelligence such as SSL grade or reputation scores has been published. Consequently, analysts cannot confirm which credential‑capture forms or lure techniques are employed, nor can they attribute the infrastructure to a specific threat actor. Given the confirmed malicious classification by multiple vendors and its inclusion on a blocklist, defenders should treat the domain as high‑risk.

Recommended mitigations include adding the domain to local and network‑level deny lists, updating web‑filter policies to block any HTTP(S) requests to the host, and ensuring endpoint protection solutions are configured to recognize the VirusTotal detections. Continuous monitoring for new DNS resolutions or changes in the hosting IP is advised, as GitHub Pages can host multiple sub‑domains that may be repurposed. Organizations should also educate users about the risks of unsolicited links that resolve to GitHub‑hosted pages, especially when the URL contains unfamiliar or personal identifiers such as “akankshanetkar-ux”.