investquo[.]github[.]io

This domain, investquo.github.io, is currently under investigation as a generic phishing site hosted on GitHub Pages infrastructure. Analysis indicates the domain remains active as of July 25, 2026, with no nameservers explicitly configured (reported as NS_NOT_FOUND). The domain resolves to IP address 185.199.108.153, which is part of GitHub’s content delivery network. While the domain appears on one security blocklist (PhishDestroy), it has not been flagged by any of the 91 vendors that scanned it on VirusTotal, though the absence of detections does not confirm safety.

Infrastructure analysis reveals the domain is registered through GitHub, Inc., a legitimate platform often exploited for phishing due to its free hosting capabilities and trusted reputation. The lack of vendor detections may reflect limited visibility or recent activation, as GitHub Pages domains can be rapidly deployed and removed. Defenders should note that this domain has not been observed in Safe Browsing or other major threat intelligence feeds beyond the single blocklist entry, which may indicate early-stage activity or targeted distribution. No specific brand impersonation, phishing kit, or scam category has been confirmed in available data.

The exact content of the site remains unanalyzed, and no page title or HTTP response details are provided. Defenders are advised to treat this domain as suspicious based on its hosting context and blocklist presence. Monitoring for changes in detection status, additional blocklist inclusions, or shifts in infrastructure (e.g., IP changes, SSL anomalies) is recommended. If internal logs or user reports confirm interaction with this domain, incident response should prioritize credential reset and device isolation protocols.