princeyy0707-cell[.]github[.]io

This domain, princeyy0707-cell.github.io, is an active phishing infrastructure hosted on GitHub Pages and flagged by multiple security vendors as of July 30, 2026. Analysis indicates the domain is classified as a high-risk threat due to its involvement in social engineering campaigns, as confirmed by Google Safe Browsing. The domain resolves to the IP address 185.199.108.153, a known GitHub Pages hosting range, and is registered through GitHub, Inc. No nameservers are currently associated with the domain, which is atypical for legitimate hosted content but consistent with rapidly deployed phishing pages. The domain appears on two security blocklists and is actively blocked by PhishDestroy and OpenPhish.

Eleven of ninety-one security vendors on VirusTotal have flagged this domain, though the specific detection rules or payloads are not detailed in available intelligence. The absence of additional context—such as the targeted brand, phishing kit, or exact lure type—limits further classification. However, the social engineering designation from Google Safe Browsing suggests the site likely impersonates a trusted entity to deceive users into disclosing credentials or sensitive information. Defenders should treat this domain as malicious and prioritize blocking it at the DNS, proxy, or endpoint level.

Given its GitHub Pages origin, organizations may also consider monitoring or restricting access to *.github.io subdomains unless explicitly required for business operations. The domain remains active as of the report date, and no takedown or mitigation actions have been observed. Further investigation into the page content, if accessible, may reveal additional indicators such as embedded scripts, redirect chains, or backend infrastructure. Until such analysis is conducted, the exact nature of the phishing lure remains unconfirmed.