victor-woodut154[.]github[.]io

As of July 23, 2026, the domain victor-woodut154.github.io is actively flagged for generic phishing threats and remains under investigation. Analysis indicates this domain has been blocked by the PhishDestroy detection vendor and is listed on at least one known security blocklist, providing direct evidence of its association with phishing-related activities. The domain resolves to IP address 185.199.108.153, which is part of the infrastructure operated by GitHub, Inc., based on its registration details. Notably, the nameservers for victor-woodut154.github.io are not identified (NS_NOT_FOUND), which may suggest non-standard domain configuration or an attempt to obscure legitimate DNS records.

No information is available about the site's page title, SSL certificate status, HTTP response, or specific scam kit deployment, and the precise content hosted on the domain has not been analyzed. There is no detection intelligence from Safe Browsing, OTX, or other major threat feeds beyond the single blocklist and PhishDestroy alert. Defenders should treat this domain as potentially hazardous due to its confirmed blocklist presence and ongoing active status.

Immediate action should include monitoring for attempts to access this domain within organizational networks, updating blocklists, and restricting traffic to the identified IP. Further forensic analysis is recommended to determine the scope of phishing activity and any possible impact. Until the content and functionality of the site are fully assessed, the domain should be considered high risk for end-user exposure.