ednaldofaceff-jpg[.]github[.]io

The domain ednaldofaceff-jpg.github.io is currently flagged as an active credential harvesting site. Infrastructure analysis shows the domain resolves to the IP address 185.199.108.153, which belongs to the GitHub Pages hosting service operated by GitHub, Inc. Registration was performed through GitHub, Inc., and the nameserver query returned no result (NS_NOT_FOUND), indicating that standard DNS delegation information is unavailable. The site has been blocked by the PhishDestroy feed and appears on a single public security blocklist, suggesting that at least one external filtering system has identified it as malicious.

VirusTotal scans report that 14 of 91 security vendors have raised detections against the domain, providing independent confirmation of suspicious activity. No additional evidence such as page title, SSL certificate details, HTTP status codes, or Safe Browsing verdicts is available in the current intelligence set. Because the domain is hosted on a legitimate cloud service, traditional reputation signals may be limited, and the lack of publicly visible metadata increases uncertainty about the exact phishing payload or target brand.

Defenders should treat the domain as high‑risk: add it to URL filtering and DNS blocklists, monitor outbound connections to the associated IP, and consider disabling access to GitHub Pages subdomains that are not explicitly required. Continuous re‑evaluation is advised as further threat‑intel, such as content analysis or additional vendor detections, becomes available.