noureaures[.]github[.]io

Analysis of noureaures.github.io on July 27, 2026 indicates this domain is hosted on GitHub Pages infrastructure and is currently under investigation for generic phishing activity. The domain resolves to 185.199.110.153, an IP address assigned to GitHub, Inc. (ASN 36459), which is consistent with legitimate GitHub Pages hosting but also commonly exploited for phishing due to its free, low-friction registration process. No nameservers are explicitly listed for the domain, which is typical for GitHub Pages deployments managed through GitHub's own DNS. VirusTotal scans conducted by 91 security vendors returned no detections at the time of this report. While the absence of detections does not confirm safety, it suggests the domain has not yet been widely flagged by automated detection systems.

However, the domain appears on at least one security blocklist (PhishDestroy), indicating that at least one vendor has identified it as malicious. This discrepancy highlights the importance of cross-referencing multiple threat intelligence sources rather than relying solely on detection counts. The domain remains active, and no specific brand, phishing kit, or targeted scam type has been confirmed in available data. The exact content of the site has not been analyzed, so the nature of the phishing lure (e.g., credential harvesting, fake login portals, or other schemes) is unknown.

Defenders should treat this domain as potentially malicious based on its presence on a security blocklist and its use of GitHub Pages, a common vector for phishing campaigns due to its ease of deployment and lack of upfront cost. Organizations are advised to monitor network logs for connections to noureaures.github.io and consider blocking the domain at the perimeter if phishing activity is confirmed. Given the domain's hosting on GitHub Pages, takedown requests may be directed to GitHub's abuse team with evidence of malicious activity.