gunsandmetallica[.]github[.]io

Analysis indicates that the domain gunsandmetallica.github.io is currently active and has been identified as a phishing infrastructure. The domain is hosted on GitHub Pages and resolves to the IPv4 address 185.199.108.153, which belongs to the GitHub, Inc. hosting range. Registration information confirms that the registrar is GitHub, Inc., consistent with the hosting provider. The domain appears on a single security blocklist and is also listed by the PhishDestroy feed, confirming that threat‑intel communities have observed malicious activity associated with it.

VirusTotal has recorded detections from 13 of 91 scanned scanners, providing independent corroboration of suspicious behavior. No additional metadata such as SSL certificate details, HTTP response codes, or page title is available in the supplied intelligence, so the exact content served by the site cannot be described. The lack of publicly visible nameserver data (NS_NOT_FOUND) further limits attribution of DNS configuration.

Given the convergence of blocklist listings, multiple vendor detections, and the fact that the domain is hosted on a platform frequently abused for phishing, defenders should treat the site as malicious. Recommended mitigation steps include adding the domain to network and endpoint blocklists, updating web filtering policies to deny traffic to the host, and monitoring for any related GitHub‑Pages subdomains that share the same IP range. Continuous re‑evaluation is advised, as additional indicators such as page title or payload analysis may emerge.