lokeshmalik404[.]github[.]io

The domain lokeshmalik404.github.io is currently active and has been identified as a generic phishing infrastructure. It is hosted on GitHub Pages, as indicated by the registration through GitHub, Inc. and the resolution to the IP address 185.199.108.153, which belongs to the GitHub hosting range. The domain lacks publicly visible nameserver records, returning NS_NOT_FOUND in DNS queries, which is consistent with GitHub’s default configuration for user‑generated sites.

Security monitoring platforms have taken notice: the domain is listed on one security blocklist and has been blocked by the PhishDestroy service. VirusTotal analysis shows that five out of ninety‑one scanning engines have flagged the domain, suggesting the presence of malicious indicators despite the majority of scanners reporting no detection. No additional intelligence such as page title, SSL certificate details, or specific target brand has been released, leaving the exact content of the hosted page unverified.

Given the active status, the association with a reputable hosting provider, and the partial detection by multiple vendors, defenders should treat the domain as high‑risk. Recommended actions include adding the domain to network‑level deny lists, monitoring DNS queries for the IP 185.199.108.153, and employing URL filtering solutions that reference the known blocklist entry. Continuous re‑evaluation is advised, as further analysis of the hosted page could reveal additional threat vectors or target brands.