DANGEROUS

Critical risk detected

3 of 92 antivirus engines flag this page (3 outright malicious). Multiple independent checks — antivirus engines, browser safety blocklists, and threat databases — flagged this site. Don't enter personal information, deposit money, or download files.

Security Review

Is reapergamin18.github.io legit or a scam?

Our verdict:Dangerous· 1/100

A malicious GitHub Pages subdomain flagged by Sophos and G-Data for hosting phishing content and credential-harvesting tools.

reapergamin18.github.ioScanned 1d ago
0
Trust score
DANGEROUS
Score breakdown
Heuristics 0·MT 12
Screenshot of reapergamin18.github.ioSee the live page ↓
Category tags
phishing#phishing95% MT confidence
Technical red flags (2)
3 of 92 engines flaggedDomain is 0 days old
Positive signals (3)
Not on major blacklistsEncrypted connectionClean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
3/92
Engines flagged this URL
Domain Age
0 days old
Registration date unknown
Intelligence
Dangerous
High likelihood · 95% confidence

Website Preview

Screenshot of reapergamin18.github.io
LIVE RENDER
reapergamin18.github.io

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

50
/ 100
High visual risk

Visual red flags detected in the screenshot

The screenshot shows a standard GitHub Pages 404 error indicating that no site is currently hosted at this address.

Visual risk50/100

What our vision model saw

1 signal

Page renders a 404 error

Intelligence

Advanced threat intelligence
Analysis
High scam likelihoodengineMT · Guardiantrust12/100
MT AgentLive web researchVisual inspection
0%
Confidence
Our analysis identified this domain as a known phishing host. While the page currently shows a 404 error, security records from G-Data, Gridinsoft, and Sophos confirm it has been used to host deceptive content. The domain is a subdomain of GitHub Pages, a platform frequently abused by attackers to host temporary scam sites. Research shows this specific URL was recently sinkholed and flagged in phishing databases for impersonating login pages. Because it has no legitimate business history and multiple active malware detections, it is considered highly dangerous.
Full dossier
Analysis complete

Page Content

The URL currently returns a standard 404 error page from the hosting provider. This often happens when a malicious site is taken down or moved to a different subdirectory to avoid detection.

Infrastructure

The site is hosted on GitHub's infrastructure, which provides a valid SSL certificate but offers no verification of the site operator's identity. The hosting IP has a history of abuse reports related to phishing and malicious activity.

Domain History

The subdomain has no established reputation or long-term history. It appeared suddenly in security feeds and was immediately flagged for hosting a fake 'expense tracker' used for data harvesting.

Web Reputation

The domain is listed on multiple threat intelligence feeds as a phishing threat. It has been sinkholed by security providers to prevent users from reaching the malicious content.
Risk Factors
5
  • Flagged as phishing by Sophos, G-Data, and Gridinsoft.
  • Listed in multiple security databases as a malicious credential harvester.
  • Hosted on a GitHub Pages subdomain, a common tactic for short-lived scams.
  • Associated with a 'sinkholed' status, indicating active intervention by security providers.
  • No verifiable business registration or ownership information available.
Positive Signals
1
  • Uses a valid SSL certificate from a recognized issuer.
AI Recommendation
Avoid this site and do not attempt to interact with any subpages. If you previously entered credentials on this domain, change your passwords immediately.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for reapergamin18.github.io, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
No public record found
Could not match the site to a registered company — common for small sites.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 scam reports
Key findings
7 headline facts from open-web research
  • Domain reapergamin18.github.io is a GitHub Pages subdomain (IP 185.199.108.153) hosting /expense-tracker/.
  • Listed on MalwareURL as 'Phishing' under AS54113 (Fastly) as of 2026-07-06.
  • urlquery.net reports flag reapergamin18.github.io/expense-tracker/ as malicious/phishing (DNS4EU sinkholed, urlquery phishing detection).
  • Appears in multiple urlquery.net and phishdestroy.io reports alongside other flagged GitHub.io pages.
  • Domain age listed as 0 days; no prior mentions, reviews, or complaints found on Reddit, Trustpilot, or general web searches.
  • No business registration, scam reports on major sites (ScamAdviser, ScamDoc), or positive reviews located.
  • GitHub.io pages are commonly abused for phishing/malware hosting per multiple security reports.
Scam reports (3)
Direct quotes from public scam databases, forums, and news.
  • MalwareURLopen

    "reapergamin18.github.io , (AS54113) FASTLY, Phishing , 2026-07-06"

  • urlquery.netopen

    "DNS4EU, reapergamin18.github.io , malicious ."

  • urlquery.netopen

    "DNS4EU, malicious. Sinkholed. urlquery, phishing . Phishing - Facebook ... reapergamin18.github.io /expense-tracker/"

Research summary
Narrative write-up from our AI analyst, grounded on the facts above
Our research found multiple reports from security trackers flagging this domain as malicious. It has been specifically identified as a phishing site in several threat databases. No positive reviews or legitimate business mentions exist for this host, which is typical for ephemeral scam pages.

Threat Detection

Antivirus Engines

Detection matrix · live
3 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

3Malicious0Suspicious58Harmless92Engines
0
of 92
G-Data
Malicious· phishing
Gridinsoft
Malicious· phishing
Sophos
Malicious· phishing

3 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Technical Details

Domain & Encryption

Domain History
Age0 days old
RegistrarHidden
RegisteredUnknown
ExpiresUnknown
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerLet's Encrypt · YR2
ExpiresSep 2, 2026 (58d)
Self-signedNo
Hosting & Technology
HostingGitHub, Inc.
Server locationUS

Server Reputation

Abuse Intelligence
Confidence score13%
Reports on file12
ISPGitHub, Inc.
Usage typeContent Delivery Network

What to do

Avoid this site

Our automated review flagged enough risk that you should treat this site as unverified.

  • Do not interact with reapergamin18.github.io

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Final Verdict

0
Trust / 100
Final Verdict·reapergamin18.github.io
DANGEROUS

This site is a malicious phishing page hosted on GitHub Pages that has been flagged for harvesting credentials. Multiple security engines and blocklists have confirmed it is used for fraudulent activity. Do not enter any personal or financial information.

Avoid this site and do not attempt to interact with any subpages. If you previously entered credentials on this domain, change your passwords immediately.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review flags reapergamin18.github.io as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
  • No — reapergamin18.github.io scored 1/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
  • Yes. reapergamin18.github.io presents a valid TLSv1.3 certificate issued by Let's Encrypt · YR2, expiring in 58 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • reapergamin18.github.io is 0 days old. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • 3 out of 92 antivirus engines in our malware network flagged reapergamin18.github.io as malicious or suspicious (3 outright malicious). Even one detection is a meaningful signal.
  • No. reapergamin18.github.io is not currently listed on the major browser blocklist feeds that modern browsers use.
  • reapergamin18.github.io resolves to an IP operated by GitHub, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on July 6, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around reapergamin18.github.io have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.