aman-yadav41[.]github[.]io

The domain aman-yadav41.github.io is currently active and classified as high‑risk generic phishing. VirusTotal reports that 16 of 91 security vendors have flagged the domain, indicating a substantial detection rate across multiple scanning engines. Registration metadata shows the domain was created through GitHub, Inc., which is typical for attacker‑controlled repositories that host malicious pages. DNS resolution points to the IP address 185.199.108.153, an address associated with GitHub Pages hosting infrastructure, and the nameserver query returns NS_NOT_FOUND, suggesting that standard authoritative name server information is unavailable or intentionally obscured.

The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one dedicated anti‑phishing platform has identified it as malicious. Google Safe Browsing further flags the site for social engineering, a category that aligns with generic phishing attempts aimed at credential harvesting or malicious link distribution. While the available intelligence confirms the domain’s malicious classification, the specific content hosted on the page, any SSL certificate details, HTTP response codes, or page title have not been disclosed, leaving those aspects of the threat surface unverified. Defenders should prioritize blocking the domain at perimeter firewalls, DNS resolvers, and web proxies, leveraging the observed indicators: the domain name, its GitHub‑Pages IP address, and the VirusTotal detection count.

Continuous monitoring of the IP 185.199.108.153 for additional malicious activity is advised, as shared hosting environments can be repurposed for further campaigns. Organizations using Google Workspace or other services that rely on Google Safe Browsing should ensure that their security controls ingest these threat feeds to automatically quarantine or warn users about links to this domain.