vicsmart173-prog[.]github[.]io

This domain, vicsmart173-prog.github.io, is flagged as an active high-risk phishing endpoint targeting financial service users. Analysis indicates the infrastructure is designed to impersonate legitimate banking or payment portals, likely harvesting credentials or financial data through fraudulent login interfaces. The domain currently maintains operational status despite partial detection by security systems. Infrastructure analysis reveals the domain is registered through GitHub, Inc., with a creation date of June 12, 2026, suggesting either a typo-squatting attempt or an advanced persistent campaign. It resolves to the IP address 185.199.108.153, a known GitHub Pages hosting node, and employs a Let's Encrypt SSL certificate (R12) to present a false sense of legitimacy. Detection metrics show 6 of 95 security vendors on VirusTotal flagging the domain as malicious, while it appears on one additional security blocklist. The page title, 'Site not found · GitHub Pages,' may indicate either a staging environment or an attempt to evade automated crawlers. Current status confirms the domain remains active and accessible, posing an ongoing threat to unsuspecting users. Organizations are advised to implement network-level blocking for 185.199.108.153 and monitor for related subdomains under the github.io namespace. End users should verify all financial service URLs directly through official channels and avoid interacting with unsolicited login prompts, particularly those hosted on public repository platforms. Security teams are recommended to review web proxy and DNS logs for connections to this IP and domain as part of incident response procedures.