site-protegido[.]github[.]io

PhishDestroy identifies site-protegido.github.io as a high-risk credential theft domain. This generic phishing threat is designed to trick users into entering sensitive login credentials, likely through a fake authentication page hosted on GitHub Pages. The domain remains active and poses a significant risk to anyone who may encounter it.

Technical indicators reveal that site-protegido.github.io resolves to IP 185.199.108.153 and is registered through GitHub, Inc. with a creation date of May 19, 2026. VirusTotal reports 5 out of 95 security vendors flagging this domain as malicious. It appears on one security blocklist and currently shows a "Site not found" page title, which may be a placeholder or a tactic to evade detection. The SSL certificate is issued by Let's Encrypt (R12), providing an appearance of legitimacy.

To protect against this credential theft threat, users should never enter any personal information on this domain and should avoid clicking any links from suspicious messages. Organizations should block access to site-protegido.github.io at the network level and educate users about phishing indicators, such as unexpected login prompts from GitHub Pages subdomains. Security teams should monitor for any related domains and report the activity to GitHub and relevant threat intelligence platforms.