gitconnect-online[.]web[.]app

Analysis indicates that the domain gitconnect-online.web.app is actively hosting a site that claims to be related to Github, as reflected in the page title “Github General Blockchain Support”. The domain was registered on May 12, 2026 and resolves to the IP address 199.36.158.100, which maps to a Google‑owned hosting infrastructure located in the United States. The TLS certificate presented is issued by a Google Trust Services authority (WR4), confirming the use of Google’s certificate infrastructure. An HTTP request returns a 200 status code, demonstrating that the site is reachable and serving content. Infrastructure monitoring shows the domain is listed on three known security blocklists and has been blocked by several anti‑phishing filters. A reputation assessment from a commercial engine assigns a trust score of 0 out of 100. Scanning by a multi‑engine service reported that two of ninety‑two security vendors flagged the site, indicating the presence of suspicious characteristics. No additional behavioural data such as redirects, payload delivery, or credential harvesting mechanisms have been disclosed, leaving the exact malicious functionality uncertain. Given the confirmed brand impersonation of Github and the active hosting on a reputable cloud provider, defenders should continue to block the domain at network perimeter and endpoint layers, monitor DNS queries for the host, and advise users to avoid any unsolicited communications referencing Github support. Ongoing observation is recommended to detect any evolution of the site’s content or the emergence of additional malicious indicators.