rafaelmartinsdosanjos27-ship-it[.]github[.]io

The domain rafaelmartinsdosanjos27-ship-it.github.io is currently flagged for generic phishing and is active. Analysis indicates that this domain may be attempting to impersonate GitHub or its services, potentially to deceive users and steal sensitive information.

Infrastructure analysis reveals that the domain rafaelmartinsdosanjos27-ship-it.github.io is registered through GitHub, Inc. and resolves to the IP address 185.199.108.153, which is located in the United States. The domain was created on April 19, 2026, and is protected by a Let's Encrypt SSL certificate (R12). According to VirusTotal, the domain has been flagged by 20 out of 95 security vendors, indicating a significant level of suspicion. Additionally, the domain appears on one known security blocklist and is blocked by PhishDestroy. The page title 'Site not found · GitHub Pages' suggests that the domain may have been taken down or is not properly configured, but the active status and detection count suggest ongoing threat activity.

Given the current active status of the domain, it is recommended that users avoid accessing rafaelmartinsdosanjos27-ship-it.github.io and report any suspicious activity to their security teams. Network administrators should consider adding this domain to their blocklists to prevent potential phishing attacks. Further monitoring and analysis are advised to track any changes in the domain's status or infrastructure.