okegaskepin-lab[.]github[.]io

okegaskepin-lab.github.io is a tenant hostname on Fastly, not a separately registered domain. PhishDestroy first recorded this hostname on Jul 29, 2026. Stored content metadata identifies Instagram as the apparent target. The assembled evidence scores 45/100 (elevated).

One independent source is positive: URLScan. URLScan returned a malicious verdict with score 100 on Jul 29, 2026 at 00:42 UTC. The evidence is not unanimous. On Jul 29, 2026 at 00:37 UTC, VirusTotal recorded 0 detections among 91 engines; Google Safe Browsing returned no flag. The external blocklist snapshot contained no matches on Aug 7, 2026 at 14:20 UTC. The 0/91 VirusTotal result therefore records detection disagreement at that collection time, not the absence of the later source findings.

HTTP 404 was recorded on Aug 7, 2026 at 01:05 UTC; content was unavailable. Fastly is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 185.199.108.153 on AS54113 (FASTLY - Fastly, Inc., US). The associated network metadata labels the endpoint as AS54113 Fastly, Inc. in San Francisco, US. This is shared platform infrastructure; the IP and ASN are hosting context, not attribution to unrelated tenants. The stored server header is GitHub.com. Captured page title: “Instagram”. DOM analysis completed on Jul 29, 2026 at 02:20 UTC; stored DOM score 0/100. The evidence archive retains 3 visual captures from PhishDestroy and URLScan. IoC extraction completed on Jul 29, 2026 at 01:50 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. The platform TLS certificate was issued by Let's Encrypt with validity through Sep 2, 2026; checked Jul 29, 2026 at 01:02 UTC.

The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings. The stored record does not establish the post-click interaction, and it does not claim a confirmed wallet-draining transaction or credential submission.