yash28122005[.]github[.]io

yash28122005.github.io is a sophisticated phishing site that impersonates legitimate services to trick users into revealing sensitive information. The domain is currently active and poses a high risk to anyone who encounters it. It leverages the trusted GitHub Pages infrastructure to appear more credible, making it particularly dangerous. Visitors may be presented with fake login pages or deceptive forms designed to capture credentials, financial details, or other personal data.

PhishDestroy identified this threat through multiple technical indicators. VirusTotal reports that 12 out of 95 security vendors flag this domain as malicious, a strong signal of its harmful nature. The domain was registered on April 12, 2026 through GitHub, Inc., and resolves to IP address 185.199.108.153. It appears on one security blocklist and uses a Let's Encrypt SSL certificate (R12), which gives it a false sense of legitimacy. The page title currently reads "Site not found · GitHub Pages," but this may change as attackers update the content.

If you have visited yash28122005.github.io, immediately change any passwords entered on the site and enable two-factor authentication on your accounts. Monitor your financial accounts for unauthorized activity and run a full antivirus scan on your device. Report the domain to your email provider or security team to prevent further exposure. Stay vigilant against similar phishing attempts that exploit trusted hosting services.