deryaylalezzetlercollab[.]github[.]io

PhishDestroy identifies deryaylalezzetlercollab.github.io as a live fake-giveaway scam impersonating Turkish food brands. The GitHub-hosted subdomain mimics a legitimate brand collab page to harvest credentials and crypto deposits from Turkish-speaking users. No advanced drainer kit is observed in current payloads, but the site employs a spoofed brand logo and countdown timer to fabricate urgency.

This domain was flagged with a VirusTotal aggregate score of 0 out of 95 scanners, indicating zero detections at the time of assessment. The domain is registered via GitHub Pages (pages.github.com) with a Let’s Encrypt SSL certificate issued on 2024-05-12. The apex domain deryaylalezzetlercollab.github.io was created on 2024-05-09, and its IP resolves to GitHub’s Anycast network (185.199.108.153). Google Safe Browsing (GSB) has not yet blacklisted the URL, and public blocklists show no prior listings.

The site remains active and under active phishing campaign operations as of May 2024. GitHub has been notified via Trust & Safety report; however, the repository remains accessible pending review. Remaining risk is classified as HIGH due to the absence of detection signatures and the domain’s short operational window, which limits historical blocklist coverage. Users are advised to avoid engagement and report the URL to their local CERT or browser safety teams.