luizotaviofaria[.]github[.]io

Analysis of luizotaviofaria.github.io shows that the domain is currently flagged as a generic phishing threat and remains active as of the report date, July 22, 2026. The domain is listed on two independent security blocklists and is explicitly blocked by both PhishDestroy and OpenPhish, indicating that at least two reputable threat‑intelligence sources have observed malicious activity associated with this host. Infrastructure data reveal that the domain resolves to the IP address 185.199.108.153, which is owned by GitHub, Inc. The registration record confirms that the domain was created through GitHub's registration service, and no authoritative nameserver records are publicly available (NS_NOT_FOUND). This lack of visible nameserver information can hinder rapid remediation but does not, by itself, confirm malicious intent.

VirusTotal reports that the domain has been scanned by 95 AV vendors, none of which have raised a detection at the time of scanning. While a zero‑detection count may suggest the absence of known signatures, it does not constitute proof of safety, especially given the domain's presence on active blocklists. The risk level is marked as "under investigation," reflecting uncertainty about the full scope of the campaign.

Defenders should treat the domain as hostile: block DNS resolution at the network perimeter, add the domain to local deny lists, and monitor outbound connections to the associated IP address for any anomalous traffic. Continuous re‑evaluation is advised, as additional detections or changes in blocklist status may emerge. Until further evidence is gathered, the precautionary approach is to assume the domain is being used for phishing and to enforce appropriate mitigation controls.