johnclark009910-rgb[.]github[.]io

The domain johnclark009910-rgb.github.io is currently flagged as a high‑risk generic phishing site. Analysis shows that the domain resolves to the IP address 185.199.109.153 and is hosted on the GitHub Pages service, indicating registration through GitHub, Inc. VirusTotal scans have returned six positive detections out of ninety‑five submitted engines, confirming malicious labeling by multiple vendors. The site is presently listed on one public security blocklist and is already blocked by the PhishDestroy filtering solution. No additional infrastructure such as command‑and‑control servers, credential‑stealing scripts, or malware payloads has been observed in the available data. The absence of further technical artefacts means that the precise phishing campaign details, including target brand or credential collection method, remain unknown. Defenders should immediately block the domain at DNS resolvers and proxy devices, add the IP address 185.199.109.153 to network‑level deny lists, and monitor outbound traffic for any attempts to contact the host. Continuous re‑evaluation is advised, as the domain remains active and may evolve its tactics.