adgroupofcompanies[.]github[.]io

Analysis of the domain adgroupofcompanies.github.io indicates active malicious activity consistent with a generic phishing campaign. The site is registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, which is owned by GitHub’s hosting infrastructure. VirusTotal has recorded detections from 15 of 91 security vendors, demonstrating that a notable subset of scanning engines consider the domain malicious. Additionally, the domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its classification as a phishing vector.

Google Safe Browsing has flagged the site for social engineering, a label that aligns with the observed phishing behavior. The domain’s nameserver information is reported as NS_NOT_FOUND, suggesting that standard DNS queries for authority records are failing or are being obscured, a tactic sometimes employed to hinder attribution. No publicly available page title, SSL certificate details, HTTP response codes, or content analysis have been documented, leaving the exact lure or impersonated brand undefined.

Given the convergence of multiple independent detections, blocklist entries, and safe browsing warnings, defenders should treat the domain as high‑risk. Recommended mitigations include adding the domain to network and endpoint blocklists, monitoring DNS queries for the associated IP address, and alerting users about potential phishing attempts originating from GitHub‑hosted subdomains. Continuous re‑evaluation is advised as additional intelligence, such as page content or victim reports, becomes available.