tapan-2835[.]github[.]io

Analysis of tapan-2835.github.io indicates a high-risk phishing domain hosted on GitHub Pages infrastructure, active as of July 29, 2026. The domain resolves to 185.199.108.153, an IP address associated with GitHub's content delivery network. No nameservers are configured, consistent with GitHub Pages default settings. Google Safe Browsing has classified this domain under 'social engineering,' confirming deceptive intent targeting end users.

VirusTotal telemetry shows 13 of 91 security vendors flagging the domain, with detections spanning phishing, fraud, and malicious URL categories. The domain appears on one security blocklist, and PhishDestroy has implemented a block. No brand target or specific phishing kit is identified in available data; the exact content served remains unanalyzed. The domain was registered through GitHub, Inc., leveraging legitimate hosting services to evade initial reputation-based filters.

Defenders should treat this domain as confirmed malicious. Recommended actions include blocking the domain and IP at perimeter security controls, alerting users who may have accessed the site, and monitoring for related GitHub Pages subdomains that may emerge as part of the same campaign. The absence of nameservers or custom DNS does not reduce risk, as GitHub Pages domains bypass traditional DNS-based protections. No SSL certificate anomalies were reported, but HTTPS presence does not indicate legitimacy for phishing sites.