my6363636[.]github[.]io

The domain my6363636.github.io is currently active and has been classified as a generic phishing threat with an elevated risk rating. Infrastructure analysis shows the domain is registered through GitHub, Inc., indicating that it is hosted on the GitHub Pages service. DNS resolution points to the IP address 185.199.110.153, which is owned by GitHub and commonly used for static site hosting. No authoritative nameservers were returned during lookup, suggesting the domain relies on GitHub’s default DNS configuration.

The site has been blocked by the PhishDestroy blocklist and appears on one additional security blocklist, reinforcing the suspicion of malicious intent. VirusTotal scans report that 12 of 91 security vendors flagged the domain, providing independent confirmation of its malicious nature. The combination of vendor detections, blocklist listings, and the elevated risk level indicates that the domain is being used to host phishing content, although the specific brand or credential‑stealing payload has not been publicly disclosed.

Defenders should continue to block traffic to the domain at network borders, update URL filtering policies, and monitor for any related C2 activity originating from the GitHub Pages IP range. Because the underlying hosting platform is a legitimate service, any takedown request should be directed to GitHub’s abuse team with supporting evidence from the vendor detections and blocklist entries. Continuous re‑evaluation is advised, as the site may evolve its content or hosting configuration without further notice.