snyhhh-m[.]github[.]io

This domain, snyhhh-m.github.io, is identified as a generic phishing site with no explicit brand impersonation or drainer kit association. Analysis indicates it leverages GitHub Pages infrastructure to host malicious content, a tactic increasingly observed in low-sophistication phishing campaigns. The absence of a visible page title beyond 'Site not found' suggests either a placeholder state or an attempt to evade automated detection by reducing identifiable artifacts. Infrastructure analysis reveals the following technical indicators: the domain is registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, located in the United States. The SSL certificate is issued by Let's Encrypt (R12), a common choice for both legitimate and malicious sites due to its accessibility. The domain was created on May 19, 2026, though this date may reflect a typo or placeholder in registration records. VirusTotal reports 15 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist and is actively blocked by PhishDestroy. Google Safe Browsing (GSB) status is not explicitly provided but is likely flagged given the detection volume. As of the latest assessment, snyhhh-m.github.io remains active, posing a high risk to users who may encounter it through phishing links distributed via email, social media, or compromised websites. The domain's reliance on GitHub Pages infrastructure complicates takedown efforts, as GitHub's abuse reporting process may introduce delays. Users are advised to avoid interacting with the domain, and organizations should update web filters to block 185.199.108.153 and any associated subdomains. The remaining risk stems from the domain's persistence and potential for rapid content changes to evade detection.