fayyadhydervt123-cmyk[.]github[.]io

fayyadhydervt123-cmyk.github.io is currently classified as a high‑risk generic phishing site. DNS resolution points to the IPv4 address 185.199.108.153, which belongs to the GitHub, Inc. hosting infrastructure. The domain was registered through GitHub, Inc., indicating the use of a legitimate registrar to obscure malicious intent. VirusTotal has recorded 16 detections out of 91 scanned security vendors, confirming that multiple commercial scanners recognize malicious behavior associated with this host. Google Safe Browsing flags the domain for social engineering, and an unnamed security blocklist includes it, demonstrating corroborating evidence from independent threat‑intelligence feeds.

The domain appears on a single blocklist and has been explicitly blocked by the PhishDestroy mitigation service. Nameserver information is unavailable (NS_NOT_FOUND), preventing a straightforward assessment of the authoritative DNS configuration. No public SSL certificate details, HTTP response codes, or page title data have been published, so the exact content served by the site remains unverified. Consequently, analysts cannot confirm the specific phishing lures or credential‑ harvesting mechanisms employed. The lack of visible page metadata also limits the ability to attribute the site to a known phishing kit or to map its victim targeting.

Given the active status and high risk rating, defenders should treat the domain as hostile. Immediate actions include adding the domain to internal DNS blocklists, updating perimeter firewalls and web‑proxy filters to deny traffic to 185.199.108.153 when used in the context of GitHub‑hosted pages, and monitoring outbound connections for attempts to resolve the domain. Continuous re‑scanning on VirusTotal and periodic checks of Google Safe Browsing can capture any changes in detection rates. Organizations employing email security gateways should also enforce URL‑reputation checks to prevent end‑users from accessing the malicious page.