zonefggameing-hash[.]github[.]io

Analysis of zonefggameing-hash.github.io shows that the domain resolves to the public GitHub Pages address 185.199.108.153. The registration record indicates the domain was created through GitHub, Inc., which is a legitimate registrar but also provides free hosting that can be abused. VirusTotal has ingested the domain and 17 out of 95 scanning engines currently flag it as malicious, confirming a consensus among multiple security vendors that the site is being used for phishing. Google Safe Browsing classifies the URL as a social‑engineering threat, and the commercial blocklist PhishDestroy has already listed it as blocked. The domain is still active as of the report date, and its DNS configuration returns NS_NOT_FOUND, suggesting that standard authoritative name server information is not publicly disclosed. It appears on one additional security blocklist, reinforcing the perception of risk. The high risk rating reflects the combination of multiple independent detections and the active status of the infrastructure. Defenders should add the domain and its associated IP address to outbound filtering rules, monitor network traffic for connections to 185.199.108.153, and ensure that any credential‑capture URLs are denied. Continuous re‑evaluation is advised, as the threat actor could modify the hosting location or employ additional GitHub subdomains. Organizations using email or web gateways should verify that the URL is blocked by existing phishing controls and consider threat‑intel sharing with peers to accelerate detection.