peteradedokun1[.]github[.]io

Analysis as of July 29, 2026 confirms that the domain peteradedokun1.github.io is actively being used for a phishing operation and is classified as high risk. The site appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, indicating that at least one reputable sinkhole has identified malicious activity. Google Safe Browsing has flagged the URL for social engineering, which aligns with the generic phishing classification. Infrastructure inspection shows the domain resolves to IP address 185.199.110.153, an address associated with GitHub Pages hosting.

Registration metadata reveals the domain is provisioned through GitHub Pages, a legitimate service often abused for malicious hosting. VirusTotal analysis reports that 17 of 91 scanned security vendors have flagged the domain, providing multi‑vendor corroboration of its malicious nature. No additional public intelligence such as page title, SSL certificate details, or HTTP response codes is currently available, leaving those aspects unverified.

Defenders should immediately add the domain to deny‑list rules across DNS, proxy, and endpoint controls, and monitor for any related sub‑domains or similar GitHub‑Pages‑hosted URLs that exhibit comparable blocklist or Safe Browsing signals. Continuous re‑scanning on VirusTotal and periodic checks against evolving blocklists are recommended to capture any changes in detection coverage. Organizations should also educate users about the risk of unsolicited links that resolve to GitHub‑Pages domains, as the platform’s reputation can obscure malicious intent.