yogesh-ydv[.]github[.]io

PhishDestroy identifies yogesh-ydv.github.io as an active tech support scam domain, confirmed through verified threat intelligence sources and behavioral analysis. The domain is currently operational and engaged in deceptive practices designed to impersonate legitimate tech support services, tricking users into divulging sensitive information or installing malicious software. This site leverages GitHub’s free hosting platform to distribute fraudulent content, exploiting the platform’s reputation to evade initial scrutiny while maintaining operational persistence.

This domain was flagged by 16 of 95 VirusTotal security vendors, indicating significant malicious activity and a high risk of exposure to unsuspecting users. Registered through GitHub, Inc., the site resolves to IP address 185.199.111.153 and utilizes a Let’s Encrypt SSL certificate to appear legitimate. Google Safe Browsing has classified the domain under SOCIAL_ENGINEERING, confirming its involvement in fraudulent schemes aimed at manipulating users through fake technical alerts or support offers. The presence of 16 vendor detections underscores the severity of the threat, while the use of a reputable hosting provider highlights the sophistication of modern phishing infrastructures.

Users are strongly advised to avoid interacting with this domain and to report any encounters to their security teams or relevant phishing databases. Organizations should ensure their web filtering solutions are updated to block access to yogesh-ydv.github.io based on its IP, domain, and SSL certificate fingerprint. Additionally, users who may have visited the site should scan their devices for malware, reset compromised credentials, and monitor financial accounts for unauthorized activity. GitHub has been notified of the abuse, and users can further report the domain via Google Safe Browsing’s phishing and malware reporting tool to aid in global threat mitigation efforts.