ab2660713[.]github[.]io

This domain, ab2660713.github.io, is flagged as a generic phishing threat with a high risk level. Analysis indicates it operates under the guise of a GitHub Pages site, a common tactic to exploit the legitimacy of GitHub’s infrastructure. While the visible page displays a 'Site not found' error, the domain’s presence on security blocklists and vendor detections suggests it may have been used for credential harvesting or distribution of malicious payloads. No specific brand impersonation or drainer kit signatures have been confirmed, but the domain’s infrastructure aligns with known phishing patterns targeting cloud-hosted services. Infrastructure analysis reveals concrete technical indicators: the domain is flagged by 11 out of 95 security vendors on VirusTotal, with detections spanning phishing and malicious URL categories. It is registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, located in the United States. The domain was created on April 01, 2026, an unusually future-dated entry that may indicate attempts to evade temporal-based reputation checks. It appears on two security blocklists, including PhishDestroy and PhishingDB, and uses a Let’s Encrypt SSL certificate (R12) to mimic secure connections. No Google Safe Browsing (GSB) listing is currently reported, but the domain’s active status and blocklist inclusion underscore its ongoing risk. As of the latest assessment, ab2660713.github.io remains active despite its benign-appearing front end. The discrepancy between the 'Site not found' page and the domain’s malicious classification suggests it may be part of a larger, dormant phishing campaign or a placeholder for future attacks. Users and organizations are advised to block the domain at the network level, monitor for related subdomains or IPs, and treat any unexpected links to this domain as potential threats. The combination of vendor detections, blocklist presence, and anomalous creation date warrants continued vigilance, particularly for environments leveraging GitHub Pages or similar cloud-hosted services.