riyaziya34[.]github[.]io

The domain riyaziya34.github.io is currently active and classified as a high‑risk generic phishing infrastructure. Registration information shows the domain was created through GitHub, Inc., indicating the use of a reputable cloud‑based hosting provider to mask malicious intent. DNS resolution points to the IP address 185.199.108.153, which belongs to GitHub Pages infrastructure, a common vector for short‑lived phishing sites. Google Safe Browsing has flagged the domain for social engineering, confirming that the URL is associated with deceptive practices aimed at credential harvesting.

The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy service, demonstrating that at least one dedicated anti‑phishing platform has identified it as malicious. VirusTotal analysis reports that 13 of 91 security vendors have flagged the domain, providing independent corroboration of its malicious nature. Nameserver data is unavailable (NS_NOT_FOUND), which limits the ability to assess further DNS‑level manipulation.

No additional intelligence such as SSL certificates, HTTP response codes, page titles, or brand targeting has been disclosed, leaving those aspects of the infrastructure unverified. Defenders should block network traffic to 185.199.108.153, add riyaziya34.github.io to URL filtering rules, and monitor for any traffic patterns that match legitimate GitHub Pages usage to avoid false positives. Ongoing observation is recommended to detect potential changes in hosting configuration or the emergence of new detection signatures.