hungvudragon-cpu[.]github[.]io

Domain hungvudragon-cpu.github.io is assessed as credential theft infrastructure with active status. The page currently resolves to a GitHub Pages endpoint displaying 'Site not found · GitHub Pages', indicating a likely inactive or placeholder frontend masking malicious intent.

Technical indicators show the domain is hosted on IP 185.199.109.153 under infrastructure associated with GitHub, Inc. Registration timestamp is April 12 2026, indicating a newly created asset. Security telemetry reports 9 of 95 VirusTotal vendors flagging the domain, along with 1 blocklist appearance and observed classification as malicious by external filtering systems. SSL certificate issuance is from Let's Encrypt R12, consistent with automated provisioning often used in disposable phishing infrastructure.

Current status remains active, suggesting continued exposure risk. The infrastructure pattern combined with credential theft classification indicates potential user credential harvesting attempts if content becomes operational. It is recommended to block domain resolution at DNS and network layers, monitor for redirects or payload delivery, and apply heightened alerting for any authentication requests originating from this host. Given the low trust signals and early lifecycle of the domain, proactive containment is advised.