sgo453071-arch[.]github[.]io

The domain sgo453071-arch.github.io is currently active and has been classified as a generic phishing site under investigation. Infrastructure analysis shows that the domain resolves to the IP address 185.199.108.153, which is owned by GitHub, Inc. The registration record lists GitHub, Inc. as the registrar, indicating that the domain was created using GitHub’s domain‑hosting service. No authoritative nameserver information was returned (NS_NOT_FOUND), which limits the ability to trace DNS delegation paths.

The domain appears on a single security blocklist and is actively blocked by the PhishDestroy filtering service, providing an early indicator of malicious use. VirusTotal reports that the domain has been scanned by 91 antivirus and URL‑reputation vendors; none of the scanners raised a detection at the time of analysis. While the lack of detections does not constitute evidence of safety, it does suggest that the phishing payload, if any, may be using techniques that evade current signatures.

The limited visibility into page content, SSL configuration, or HTTP response codes means the precise phishing tactics remain unknown. Defenders should treat the domain as hostile: block network resolution to 185.199.108.153, add the domain to internal URL filtering lists, and monitor for any outbound connections from internal hosts. Continuous re‑evaluation is advised, as future scans or additional intelligence could reveal new indicators of compromise.