riyasanodariya777[.]github[.]io

Analysis of the domain riyasanodariya777.github.io indicates it is actively serving phishing content as of July 30, 2026. The domain is hosted on GitHub Pages infrastructure, resolving to the IP address 185.199.108.153, which is part of GitHub's official hosting range. No nameservers are configured (NS_NOT_FOUND), consistent with GitHub Pages' default behavior. The domain is flagged by 4 out of 91 security vendors on VirusTotal, confirming detection by multiple independent engines. It appears on at least one security blocklist and is explicitly blocked by PhishDestroy, a specialized anti-phishing service.

The domain's registration details are tied to GitHub, Inc., with no additional registrar information available. No SSL certificate anomalies or HTTP status errors are reported, suggesting the site is operational and accessible. The exact nature of the phishing content remains unconfirmed, as the page title and targeted brand are not specified in available intelligence. However, the classification as 'generic phishing' implies it may attempt to harvest credentials or personal data. Defenders should treat this domain as high-risk.

Blocking the domain and its resolving IP (185.199.108.153) at the network level is recommended. Organizations using GitHub Pages for legitimate purposes should review their repositories for unauthorized or malicious content, as this domain leverages GitHub's infrastructure. Further investigation into the GitHub account 'riyasanodariya777' may reveal additional malicious activity or linked repositories. No evidence suggests this domain is part of a larger campaign, but monitoring for similar patterns (e.g., GitHub-hosted phishing pages) is advised.