satya-1205[.]github[.]io

The domain satya-1205.github.io is presently active and is classified as a generic phishing infrastructure. Registration data indicates the domain was created through GitHub, Inc., which serves as the registrar for the sub‑domain. DNS resolution points to the IP address 185.199.108.153, a host commonly associated with GitHub Pages hosting services. No nameserver information was available at the time of analysis.

The domain is listed on one external security blocklist and is actively blocked by the PhishDestroy threat‑intelligence feed, demonstrating that at least one defensive entity has taken mitigation action. Google Safe Browsing has flagged the domain for social engineering, confirming that the URL is recognized as a phishing vector within Google’s web‑risk ecosystem. VirusTotal records show that the domain has been scanned by 91 antivirus and URL‑reputation vendors; none of the vendors reported a detection at the time of the scan.

While the absence of detections does not constitute a safety guarantee, the collective evidence from blocklist inclusion, Safe Browsing flag, and the active block by PhishDestroy supports a high‑risk assessment. Analysts and network defenders should continue to block the domain at perimeter defenses, monitor for any changes in detection status, and consider enriching threat feeds with the observed IP and registrar information to improve detection of similarly hosted phishing sites. Continuous re‑evaluation is advised, as the domain remains live and could be leveraged for further credential‑ harvesting campaigns.