lingnaiguodao-alt[.]github[.]io

PhishDestroy identifies lingnaiguodao-alt.github.io as a high-risk generic phishing threat. This domain, hosted on GitHub Pages, is actively being used to impersonate legitimate services and trick users into divulging sensitive information. The site is currently live and poses a significant risk to unsuspecting visitors.

Technical indicators paint a clear picture of malicious intent. VirusTotal reports that 7 out of 95 security vendors flag this domain as malicious, and it appears on at least one security blocklist. The domain was registered through GitHub, Inc. on March 26, 2026, and resolves to IP address 185.199.108.153. The SSL certificate is issued by Let's Encrypt (R12), and the page title reads "Site not found · GitHub Pages," which is a default placeholder—suggesting the phishing content may be served dynamically or the site is being prepared for an attack. The combination of a recently registered domain, low trust score from security vendors, and hosting on a free platform (GitHub Pages) is a classic indicator of a phishing campaign.

To protect yourself, never enter personal information (such as passwords, credit card numbers, or social security numbers) on this site. Avoid clicking any links or downloading files from the domain. If you have already interacted with the site, change your passwords immediately and monitor your accounts for suspicious activity. Report the domain to Google Safe Browsing and your email provider to help block future access. Stay vigilant, as phishing sites like this one are designed to look convincing but ultimately aim to steal your data.