deltarbx[.]github[.]io

Analysis of the domain deltarbx.github.io, conducted on July 20, 2026, indicates active phishing infrastructure targeting users through social engineering tactics. The domain is hosted on GitHub Pages, resolving to the IP address 185.199.108.153, a known GitHub hosting range. Infrastructure analysis reveals the domain is registered through GitHub, Inc., with no nameservers explicitly configured, a common characteristic of GitHub-hosted pages. Google Safe Browsing has flagged this domain specifically for social engineering, aligning with its classification as a high-risk threat. Despite its active status, the domain currently shows no detections from the 91 security vendors that scanned it on VirusTotal, though the absence of detections does not confirm safety. It appears on one security blocklist, PhishDestroy, which has implemented a block against it. No additional details regarding the specific brand or service being impersonated, the phishing kit in use, or the exact content of the page are available at this time, as the site's visual or functional elements have not been analyzed. Defenders are advised to treat this domain as malicious based on its presence on a security blocklist and its classification by Google Safe Browsing. Network-level blocking of the IP 185.199.108.153 may mitigate exposure, though caution is warranted as this IP hosts multiple GitHub Pages, including legitimate ones. Monitoring for changes in detection status or additional blocklist inclusions is recommended, as further analysis may reveal more about the campaign's scope or target. Organizations should also review logs for connections to this domain or IP to identify potential compromise indicators.