adityapandey87[.]github[.]io

A phishing site on adityapandey87.github.io masquerades as a Netflix clone, aiming to deceive users into providing sensitive information. The site is flagged by 14 out of 95 vendors on VirusTotal, indicating a significant recognition of its malicious intent. Additionally, it is listed on public blocklists such as PhishDestroy and OpenPhish, and Google Safe Browsing has flagged it as well.

The domain is hosted on GitHub, Inc., with an IP address registered in the United States under Fastly, Inc. The SSL certificate is issued by Let's Encrypt, which is commonly used for legitimate sites but also exploited by phishing operations to appear trustworthy. The platform risk score is a perfect 100/100, highlighting the severe threat it poses.

Despite these detections, the phishing operation leverages GitHub's platform to exploit its credibility and reach unsuspecting users. The abuse score of 38/100 suggests some level of reporting and mitigation efforts. PhishDestroy's early detection on June 22, 2026, underscores the importance of rapid identification and response to such threats. The domain's activity on a reputable platform like GitHub emphasizes the need for continuous vigilance and proactive threat intelligence.