ricorodriguez6596-boop[.]github[.]io

The domain ricorodriguez6596-boop.github.io is currently active and classified as a high-risk credential phishing threat specifically targeting GitHub login credentials. Analysis indicates this infrastructure is designed to impersonate legitimate GitHub authentication pages, tricking users into submitting sensitive account information under false pretenses. The domain remains operational as of the latest verification. Infrastructure analysis reveals the domain is registered through GitHub, Inc. and resolves to the IP address 185.199.108.153, a known hosting range for GitHub Pages. Security telemetry shows 7 of 95 vendors on VirusTotal have flagged this domain for social engineering activity, with Google Safe Browsing specifically categorizing it under SOCIAL_ENGINEERING. The domain employs a Let's Encrypt SSL certificate, which while providing encryption, does not validate legitimacy and is commonly exploited in phishing campaigns to create a false sense of security. Current assessment confirms the domain remains active and continues to pose a significant risk to users. Organizations and individuals are advised to implement immediate blocking of this domain and its associated IP address at the network perimeter. Security teams should prioritize user education regarding GitHub credential phishing tactics, particularly those leveraging GitHub Pages infrastructure. Monitoring for similar patterns (e.g., username-boop.github.io) is recommended, as this naming convention suggests potential for additional malicious subdomains. Incident responders should treat any interaction with this domain as a potential credential compromise and initiate appropriate account security protocols.