ayushhanand07[.]github[.]io

On July 29, 2026, analysis of ayushhanand07.github.io identified it as an active generic phishing infrastructure with an elevated risk rating. The domain is hosted on GitHub Pages, a service that provides free static site hosting under the github.io sub‑domain. DNS resolution points to the IP address 185.199.111.153, which belongs to the GitHub Pages content‑delivery network. VirusTotal has recorded 11 detections out of 91 scanning engines, indicating that a minority of security products have flagged the domain as malicious.

The domain also appears on a single external blocklist and is explicitly listed by the PhishDestroy feed, confirming that at least one community‑maintained anti‑phishing source considers it hostile. No additional public intelligence such as Safe Browsing status, OTX references, SSL certificate details, HTTP response codes, or page title information has been disclosed, leaving the exact content and lure technique unverified. The lack of further metadata means that the precise phishing campaign vector—whether credential harvesting, account takeover, or other social engineering—cannot be confirmed at this time. Defenders should treat any traffic to ayushhanand07.github.io as suspicious.

Recommended mitigation steps include adding the domain to local deny lists, configuring web‑gateway filters to block connections to the github.io sub‑domain when used for unexpected purposes, and monitoring outbound connections for attempts to resolve or contact the IP 185.199.111.153. Continuous re‑scanning on VirusTotal and periodic checks against threat‑intelligence feeds are advised to capture any changes in detection count or new blocklist listings. Organizations using GitHub Pages for legitimate content should enforce strict content‑security policies and verify the authenticity of any links that reference this sub‑domain before allowing user interaction.