ashtondamichotte-create[.]github[.]io

The domain ashtondamichotte-create.github.io is currently active and has been identified as a generic phishing infrastructure. Registration information shows the domain was created through GitHub, Inc., indicating the use of a legitimate hosting platform to obscure malicious intent. DNS resolution points to the IP address 185.199.111.153, which belongs to GitHub’s content delivery network, and the authoritative nameserver data could not be retrieved (NS_NOT_FOUND). The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, confirming that at least one defensive feed has recognized it as malicious.

Google Safe Browsing categorises the site under social engineering, reinforcing the phishing assessment. VirusTotal analysis reports that 14 of 91 scanned security vendors flagged the domain, demonstrating a moderate consensus among detection engines that the site is suspicious. No additional intelligence such as page titles, SSL certificate details, or HTTP response codes is available at this time.

Defenders should prioritize adding the domain to outbound filtering rules and ensure that any internal DNS resolvers are configured to block resolution of the associated IP address. Continuous monitoring of threat intelligence feeds for updates on this indicator is advised, as the underlying hosting environment may shift to other GitHub‑hosted resources. Organizations should also educate users about the risk of malicious links that appear to originate from trusted platforms like GitHub, emphasizing verification of URLs before credential submission.