yungisrael[.]github[.]io

yungisrael.github.io is a GitHub Pages-hosted domain currently flagged for generic phishing activity. The site leverages GitHub's trusted infrastructure to host a drainer kit, a malicious tool designed to siphon cryptocurrency or sensitive data from unsuspecting victims. While no specific brand impersonation has been confirmed, the generic nature of the phishing suggests opportunistic targeting of users unfamiliar with GitHub Pages abuse. The domain resolves to IP 185.199.108.153, a GitHub-controlled range commonly used for legitimate projects, further masking its malicious intent.

This domain was registered through GitHub, Inc. and currently exhibits a VirusTotal detection score of 8/95, indicating no antivirus or security vendor has flagged it yet. The SSL certificate, issued by Let's Encrypt, adds legitimacy to the surface-level appearance. As of the latest analysis, the domain is not present on Google Safe Browsing (GSB) blocklists and has not been widely blacklisted, contributing to its low initial detection rate. The absence of prior flagging highlights the sophistication of abusing reputable platforms like GitHub for malicious hosting.

yungisrael.github.io remains active and under investigation, with no immediate takedown actions reported. Users are advised to treat this domain with extreme caution, as its current lack of detections does not equate to safety. GitHub has been notified, but response times for abuse reports can vary. The remaining risk is moderate, as the domain's low detection profile and reliance on GitHub's infrastructure make it an appealing vector for continued phishing campaigns. Users should rely on proactive blocking measures and avoid direct interaction until further intelligence or takedown actions emerge.