gyan987[.]github[.]io

The phishing domain gyan987.github.io is flagged as malicious by 17 out of 91 vendors on VirusTotal. Google Safe Browsing also marks it as a threat. Despite being offline now, the domain's presence on public blocklists, including PhishDestroy, highlights its previous malicious activity. The domain was hosted on GitHub Pages with an IP address in the US, under the organization GitHub, Inc.

The domain's rapid detection on the same day it was created, May 2, 2026, underscores the efficiency of PhishDestroy's monitoring systems. The platform risk score is a perfect 100, indicating a high threat level, while the abuse score stands at 29. This suggests that the domain was actively involved in phishing attempts before being taken down.

The use of Let's Encrypt for SSL certification is common among phishing sites, as it provides a veneer of legitimacy. However, the domain's quick flagging and subsequent takedown demonstrate the effectiveness of collaborative security efforts in identifying and neutralizing threats. The domain's offline status reduces its immediate risk, but its initial activity serves as a reminder of the persistent nature of phishing threats.