gipster21[.]github[.]io

On August 07, 2026, the domain gipster21.github.io was observed as an active generic phishing infrastructure with an elevated risk rating. VirusTotal records show that 11 of 91 scanned security vendors flagged the domain, indicating a moderate level of detection across multiple engines. The domain is listed on two public security blocklists and is actively blocked by both PhishDestroy and OpenPhish, confirming its recognition by reputable anti‑phishing feeds.

DNS resolution points to the IP address 185.199.109.153, which belongs to the GitHub Pages hosting service; no additional hosting anomalies have been reported. The current intelligence does not include registrar information, SSL certificate details, HTTP response codes, Safe Browsing status, or page‑title metadata, leaving those aspects unverified at this time. Analysts should treat the domain as malicious until further forensic evidence is obtained.

Defensive recommendations include adding the domain to local deny lists, ensuring that network perimeter filters reference the PhishDestroy and OpenPhish feeds, and monitoring DNS queries for the associated IP address. Organizations employing web‑proxy or URL‑filtering solutions should enforce block rules for gipster21.github.io, and endpoint detection platforms should flag any process attempting to communicate with the resolved IP. Continuous re‑evaluation is advised as additional telemetry becomes available, particularly regarding TLS usage and any observed payloads.