vashu5678[.]github[.]io

This domain, vashu5678.github.io, is identified as a generic phishing resource leveraging GitHub Pages infrastructure to host malicious content. Analysis indicates the site does not impersonate a specific brand but instead employs broad credential harvesting techniques, likely targeting unsuspecting users through deceptive login prompts or fake authentication portals. The absence of a visible page title (displaying 'Site not found') suggests either an incomplete deployment or deliberate obfuscation to evade automated detection systems. No crypto drainer kit signatures or wallet address patterns were observed in initial scans, though dynamic content loading remains a possibility. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 185.199.108.153, a GitHub-operated endpoint in the United States. It is registered through GitHub, Inc., with an SSL certificate issued by Let's Encrypt (R12). VirusTotal detection metrics show 17 out of 95 security vendors flagging the domain as malicious. Google Safe Browsing explicitly classifies the resource as phishing, and it appears on at least one security blocklist. The domain's creation date aligns with GitHub Pages registration timestamps, though exact deployment time remains unverified due to platform limitations. Current status confirms the domain remains active and accessible, despite partial blocking by certain security filters. The hosting on GitHub Pages presents challenges for takedown, as the platform's abuse reporting mechanisms require manual verification. Remaining risk is assessed as high due to the domain's continued availability, low detection rate among some vendors, and potential for rapid content changes. Users are advised to treat all interactions with this domain as hostile, avoid entering credentials, and verify URL authenticity before engaging with any login prompts. Network-level blocking of the resolved IP (185.199.108.153) is recommended for enterprise environments, alongside monitoring for related subdomains or redirect chains.