yagneshkota[.]github[.]io

Analysis of yagneshkota.github.io indicates that the domain is being leveraged in a generic phishing campaign. The domain is registered through GitHub, Inc. and resolves to the IP address 185.199.108.153, which belongs to GitHub Pages hosting infrastructure. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, confirming that security vendors have observed malicious use.

VirusTotal records show that the site has been scanned by 95 vendors; none of the vendors reported a detection, but the absence of detections does not constitute proof of safety. Nameserver information is unavailable (NS_NOT_FOUND), limiting further DNS‑level attribution. Current intelligence marks the domain as still active, and the unique seed identifier 2effdc ties this observation to a broader campaign.

No public SSL certificate details, HTTP status codes, or page title information are available, leaving the web‑layer behavior uncharacterized. Defenders should treat the domain as hostile: block network traffic to 185.199.108.153 associated with yagneshkota.github.io, add the domain to internal deny lists, and monitor for any new indicators that may emerge from future scans or blocklist updates. Continuous observation is recommended because the detection landscape may evolve as additional security products analyze the site.