okegaskepin-lab[.]github[.]io

Analysis as of July 29, 2026 indicates that the domain okegaskepin-lab.github.io is currently active and has been observed in a single security blocklist. The blocklist entry is attributed to PhishDestroy, which is actively blocking traffic to the domain. DNS resolution points to the IP address 185.199.108.153, an address owned by GitHub’s infrastructure, consistent with the registrar information that the domain was created through GitHub, Inc. The domain’s authoritative name server data could not be retrieved (NS_NOT_FOUND), preventing verification of the full DNS hierarchy. VirusTotal has processed the domain with scans from 91 anti‑malware vendors; none of the vendors raised a detection at the time of analysis.

The absence of detections does not constitute a safety assurance, as the domain may employ techniques that evade current signatures. No public Safe Browsing, Open Threat Exchange, SSL certificate, HTTP response code, or trust‑score information is presently available for this host, and the page title or any evidence links have not been disclosed. Given the limited visibility, the primary indicators of compromise are the blocklist listing by PhishDestroy and the association with a GitHub‑hosted IP, a pattern frequently leveraged for phishing campaigns that serve malicious content from compromised or abused repositories. Defenders should continue to enforce blocklist rules that include this domain, monitor DNS queries for look‑ups to 185.199.108.153 that reference the sub‑domain, and consider adding the domain to internal URL filtering policies.

Network traffic to the IP should be inspected for anomalous HTTP(S) requests, and any user‑initiated connections to the domain should be logged and investigated. Because the domain’s content has not been publicly analyzed, threat‑intel teams are advised to request a sandbox capture of the site to determine whether it delivers credential‑harvesting pages or other malicious payloads.