test1527276253-dotcom[.]github[.]io

This domain, test1527276253-dotcom.github.io, is presently flagged by Google Safe Browsing for social engineering, indicating that it is being used to lure users into divulging credentials or personal data. The domain resolves to the IP address 185.199.108.153, which belongs to the GitHub Pages hosting network. Registration information shows the domain was created through GitHub, Inc., a legitimate registrar, but the hosting environment is frequently abused for malicious campaigns because it provides free TLS and static site capabilities. DNS queries return a “NS_NOT_FOUND” response for nameserver records, suggesting either a misconfiguration or an attempt to obscure authoritative name‑server information.

The domain appears on a single security blocklist and is actively listed by PhishDestroy, reinforcing the suspicion of malicious use. VirusTotal reports indicate that the site has been scanned by 91 antivirus and URL‑reputation engines; none of the engines reported a detection at the time of analysis, which does not constitute a clearance of risk. The combination of a Safe Browsing social‑engineering flag, presence on a phishing‑specific blocklist, and the use of a free hosting service aligns with typical infrastructure patterns observed in generic phishing operations.

Uncertainty remains regarding the exact content hosted on the site, as no page‑title or content metadata have been disclosed. Defenders should treat the domain as high‑risk: block network traffic to the resolved IP, add the domain to URL filtering policies, and monitor for any future detections or changes in reputation. Continuous re‑evaluation is advised, especially if additional scanners or blocklists begin to flag the domain.