neon59903-alt[.]github[.]io

This domain, neon59903-alt.github.io, is flagged as an active generic phishing threat with high risk level as of July 18, 2026. The domain resolves to IP address 185.199.108.153, which is associated with GitHub Pages infrastructure. It is registered through GitHub, Inc., and no nameservers were found. Google Safe Browsing flags this domain for SOCIAL_ENGINEERING, indicating it is used in deceptive schemes to trick users. The exact brand or service impersonated is not specified in available intelligence; the threat type is generic phishing, meaning the site likely attempts to harvest credentials or sensitive information without targeting a specific known brand. Defenders should treat this domain as malicious, block access at network and email gateways, and monitor for any subdomains or related infrastructure. Users encountering this domain should not interact with it. Further analysis of the page content is needed to identify the specific lure or login form being used. The domain remains active and should be added to blocklists immediately.