king-miguel[.]github[.]io

Analysis indicates that king-miguel.github.io is currently active and resolves to the IP address 185.199.108.153, which belongs to the GitHub Pages hosting infrastructure. The domain was registered through GitHub, Inc., and its nameserver information is not publicly available. Google Safe Browsing has classified the site under the SOCIAL_ENGINEERING category, and VirusTotal reports that 11 of 91 scanned security vendors flag the domain as malicious, consistent with a generic phishing profile. The observed infrastructure suggests the threat actor is leveraging a legitimate content‑delivery platform to host a phishing page, which can help evade simple reputation checks. No content analysis is available, so the specific victim‑targeting or credential‑harvesting tactics remain unknown. Defenders should treat the domain as high‑risk: block or sinkhole the address, add the domain to web‑filter allow‑lists, and monitor DNS queries for similar github.io subdomains. Users should be warned not to enter credentials on any page served from this domain, and any suspicious activity should be reported to the appropriate incident response team.