alexandru-suatean[.]github[.]io

Analysis of alexandru-suatean.github.io, a GitHub Pages-hosted domain, indicates active phishing infrastructure as of July 23, 2026. The domain is registered through GitHub, Inc. and currently resolves to IP address 185.199.108.153, a known GitHub Pages hosting range. Infrastructure checks reveal the domain lacks configured nameservers, returning an NS_NOT_FOUND status, which may indicate misconfiguration or deliberate obfuscation. The domain appears on one security blocklist and is actively blocked by PhishDestroy, though no vendor detections are recorded in the most recent VirusTotal scan, which included 95 security engines.

The absence of detections does not confirm safety, particularly given the domain's presence on a blocklist and its unresolved nameserver status. No brand target, phishing kit, or specific scam type has been identified in available data. The exact content hosted at this endpoint remains unanalyzed, and no page title or HTTP response details are currently available. Defenders should treat this domain as a confirmed phishing endpoint due to its blocklist status and hosting on a platform frequently abused for credential harvesting and social engineering campaigns.

GitHub Pages domains are often exploited due to their free hosting, legitimate SSL certificates, and association with a trusted provider. Network-level blocking or monitoring of 185.199.108.153 and related GitHub Pages IPs is recommended. Security teams should prioritize investigating any user interactions with this domain, particularly in logs or proxy data, and consider submitting the URL to additional detection platforms for further analysis.