historic-ai[.]github[.]io

PhishDestroy identifies historic-ai.github.io as a domain involved in generic phishing, specifically targeting users through deceptive credential harvesting tactics. While there is no direct branding or associated drainer kit currently identified, the site leverages GitHub Pages infrastructure, which can lend an appearance of legitimacy to unwary visitors.

Technical indicators reveal that historic-ai.github.io resolves to the IP address 185.199.108.153, which is a GitHub-hosted IP. The domain is registered through GitHub, Inc., and secured with a Let's Encrypt SSL certificate, adding to its perceived trustworthiness. VirusTotal analysis reports 0 detections out of 95 engines, indicating it has not yet been flagged by major antivirus or security vendors. There is no Google Safe Browsing (GSB) status or public blocklist count available at this time. The domain remains under investigation with the risk level marked as active but not fully confirmed.

Currently, historic-ai.github.io is active and under monitoring. Security teams are advised to remain cautious due to the domain's use of trusted infrastructure and credentials phishing intent. Immediate response actions include blocking the domain at network and endpoint levels, monitoring for any user reports of suspicious login prompts, and educating users to verify URLs carefully. Despite the low detection score on VirusTotal, the domain's ongoing activity and hosting setup pose a latent risk that warrants continued vigilance and rapid incident response preparations.