official-legdr[.]github[.]io

The domain official-legdr.github.io resolves to the IP address 185.199.108.153, indicating that it is hosted on GitHub Pages infrastructure. Registration details show the domain was created through GitHub, Inc., a legitimate registrar, but the current use is identified as a phishing vector. VirusTotal analysis recorded 13 of 91 security vendors flagging the domain, providing independent confirmation of malicious activity.

Additionally, the domain is listed on three external blocklists and has been actively blocked by PhishDestroy, MetaMask, and SEAL, demonstrating that multiple threat‑intelligence providers consider it unsafe. Nameserver information is reported as NS_NOT_FOUND, which is typical for GitHub‑hosted subdomains that rely on GitHub’s internal DNS resolution rather than external nameservers. No public SSL/TLS certificate details, HTTP status codes, Safe Browsing entries, Open Threat Exchange (OTX) reports, or page‑title metadata have been disclosed, leaving those aspects of the infrastructure unverified at this time.

Defenders should therefore treat the domain as high‑risk and implement immediate mitigations: add the full hostname to URL filtering and web‑proxy blocklists, enforce DNS‑level denial for the domain, and monitor network traffic for outbound connections to the associated IP. Continuous re‑evaluation is advised, as changes to the hosting configuration or content could affect detection outcomes.