strangerider[.]github[.]io

Analysis of the domain strangerider.github.io indicates active malicious infrastructure as of July 20, 2026. The site is hosted on GitHub Pages, resolving to the IP address 185.199.108.153, which is owned by GitHub, Inc. The domain registration is listed under GitHub, Inc., with no publicly visible nameserver information (NS_NOT_FOUND). The domain has been flagged by the PhishDestroy blocklist, confirming that threat‑intel pipelines have identified it as a phishing vector. VirusTotal scans show that 14 of 91 security vendors have raised detections against the domain, providing additional independent corroboration of malicious behavior. The domain also appears on a single external security blocklist, reinforcing its reputation as a high‑risk indicator. While the specific landing page content, page title, and SSL certificate details have not been disclosed, the convergence of hosting, registration, blocklist inclusion, and multi‑vendor detections establishes a high confidence level that the domain is being used for phishing operations. Defenders should add the domain to internal blocklists, enforce DNS sink‑hole rules for the 185.199.108.153 address range, and monitor outbound traffic for requests to GitHub Pages that are not part of legitimate development workflows. Continuous re‑evaluation is advised, as changes to the repository or hosting configuration could alter the threat posture.