vivektiwari2006[.]github[.]io

This domain, vivektiwari2006.github.io, is identified as a high-risk credential harvesting endpoint operating through GitHub Pages infrastructure. Analysis indicates the site mimics legitimate login portals to capture user credentials, likely targeting cloud service or social media accounts. No specific brand impersonation or drainer kit signatures have been confirmed, though the generic phishing classification suggests broad targeting of authentication flows. The domain leverages GitHub's hosting platform, which provides SSL encryption and CDN distribution, complicating detection through conventional network filtering. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 11 out of 95 security vendors on VirusTotal, with a single blocklist entry from PhishDestroy. It resolves to IP address 185.199.108.153, part of AS54113 (Fastly, Inc.), a US-based content delivery network. The SSL certificate is issued by Let's Encrypt (R12), a common certificate authority for phishing domains due to its free and automated issuance process. Registration details point to GitHub, Inc. as the hosting provider, with no public creation date available through standard WHOIS queries. Google Safe Browsing status remains unconfirmed, though the domain's presence on a security blocklist suggests active malicious classification. As of the latest assessment, vivektiwari2006.github.io remains active and accessible, posing an ongoing threat to users encountering the site through phishing links or compromised redirects. Response actions should include immediate blacklisting of the domain and IP address across network security controls, alongside user education on identifying GitHub Pages-based phishing attempts. The remaining risk is classified as high due to the domain's persistence, SSL encryption, and CDN-backed hosting, which enables rapid deployment and evasion of traditional detection mechanisms. Organizations are advised to monitor for connections to 185.199.108.153 and implement strict outbound filtering for GitHub Pages domains exhibiting phishing indicators.