nubexx776[.]github[.]io

The domain nubexx776.github.io is assessed as a high-risk threat, specifically categorized as brand impersonation. This domain is actively impersonating Google, a well-known and widely trusted brand, which significantly increases the likelihood of users falling victim to the scam.

Infrastructure analysis reveals that the domain nubexx776.github.io was created on April 22, 2026, and is registered through GitHub, Inc. The domain resolves to the IP address 185.199.108.153, which is located in the United States and is associated with GitHub, Inc. According to VirusTotal, 18 out of 95 security vendors have flagged this domain as malicious, indicating a notable level of suspicion among the cybersecurity community. The domain also appears on one security blocklist and has been flagged by Google Safe Browsing as a phishing site. The SSL certificate is issued by Let's Encrypt, which, while legitimate, does not imply the site's safety. The page title 'Site not found · GitHub Pages' suggests that the site may have been taken down or is not currently hosted, but the domain remains active and can still pose a threat.

To mitigate the risks associated with brand impersonation, users should be cautious when clicking links or visiting URLs that seem suspicious, especially those purporting to be from trusted brands like Google. Organizations should educate their employees about the dangers of such impersonation attacks and implement strict verification protocols for any communication claiming to be from known entities. Network administrators should consider adding this domain to their firewall and DNS blocklists to prevent access. Additionally, users should verify the URL and look for signs of phishing, such as misspellings, unusual domain extensions, or requests for sensitive information.