This domain, ryanphqross9118.github.io, is currently flagged as an active generic phishing site hosted on GitHub's infrastructure. Analysis indicates the domain resolves to IP 185.199.108.153, a known GitHub Pages address, and lacks configured nameservers, which is atypical for legitimate GitHub Pages deployments. The domain appears on one security blocklist, specifically PhishDestroy, as of the latest available data. No additional detection vendors, Safe Browsing results, or threat intelligence platform reports (e.g., OTX) are currently associated with this domain in the provided evidence.
Infrastructure analysis reveals the domain is registered through GitHub, Inc., and remains active as of August 1, 2026. The absence of nameserver records may indicate an incomplete or misconfigured deployment, though this does not rule out malicious intent. The exact content, target brand, or phishing kit in use has not been analyzed, and no page title or SSL certificate details are available in the current intelligence. Defenders should treat this domain as suspicious based on its blocklist inclusion and atypical hosting configuration.
Recommended actions include monitoring network traffic for connections to 185.199.108.153 or ryanphqross9118.github.io, implementing local blocklist updates to include this domain, and reviewing logs for any user interactions with the site. If additional context becomes available (e.g., page content, brand impersonation, or phishing kit identification), reassess the risk level and apply targeted mitigations. No further technical details about the phishing campaign or victimology are available at this time.