priyamyadav05[.]github[.]io

The domain priyamyadav05.github.io was observed on 2026-07-29 as an active generic phishing site. Registration information indicates that the domain is hosted on the GitHub Pages service provided by GitHub, Inc., and therefore the registrar field points to GitHub rather than a traditional domain registrar. DNS resolution returns the IPv4 address 185.199.108.153, which belongs to the GitHub Pages infrastructure and is shared among many legitimate GitHub‑hosted sites. No authoritative nameserver records were returned, as the query for NS records resulted in NS_NOT_FOUND, which is consistent with the default configuration of GitHub Pages when a custom subdomain is not used.

Threat‑intelligence platforms have begun to flag the domain. VirusTotal reports that fifteen out of ninety‑one scanning engines have marked the host as malicious, reflecting a moderate consensus among security vendors that the site is being used for malicious purposes. The domain is currently listed on one external blocklist and has been added to the PhishDestroy blocklist, indicating that at least one dedicated anti‑phishing service has taken automated action to prevent end‑user access. Because the domain is served from a reputable cloud provider, traditional reputation metrics such as SSL certificate age or brand‑specific page titles are not presently available.

The lack of a distinct page title or brand attribution in the collected data means that the exact phishing lure—whether it targets credentials, financial information, or other data—cannot be definitively identified at this time. Analysts should therefore treat any interaction with the site as potentially harmful and monitor for any additional indicators, such as newly observed URLs, payloads, or phishing kits associated with the same IP address. Defenders are advised to incorporate the domain identifier into web filtering rules, update intrusion‑prevention signatures to block traffic to 185.199.108.