robl0xlogin[.]github[.]io

The domain robl0xlogin.github.io is currently active and resolves to the IP address 185.199.108.153, which is owned by GitHub, Inc. The registration information confirms GitHub as the registrar, indicating the site is hosted on the public GitHub Pages service. Multiple threat intelligence sources have flagged the domain: it appears on two public security blocklists and has been added to the PhishDestroy and OpenPhish blocklists. Google Safe Browsing classifies the site as a social engineering threat, and VirusTotal reports that 14 of 91 scanned security vendors have flagged the domain as malicious. The nameserver lookup returned no results (NS_NOT_FOUND), suggesting that standard DNS delegation information is unavailable or has been deliberately obscured.

No public SSL certificate details, HTTP status codes, page titles, or direct evidence links have been disclosed, so the exact content and appearance of the page remain unverified. Defenders should treat the domain as a high‑risk credential‑phishing indicator. Network perimeter controls should block outbound connections to 185.199.108.153 and any subdomains of github.io that are not part of authorized corporate usage.

Email gateways should add robl0xlogin.github.io to deny‑list rules to prevent malicious links from reaching end users. Incident response teams should monitor logs for any authentication attempts to services that may be targeted by this domain and consider credential‑reset procedures if suspicious activity is observed. Continuous threat‑intel feeds should be consulted for updates, as the domain’s detection status may evolve with additional vendor analyses or blocklist entries.