marsheaven786[.]github[.]io

Analysis of marsheaven786.github.io indicates that the domain is actively leveraged for phishing. The site is hosted on GitHub Pages, as evidenced by registration through GitHub, Inc., and resolves to the IP address 185.199.108.153, which is owned by GitHub’s hosting infrastructure. The domain appears on two independent blocklists, PhishDestroy and OpenPhish, confirming that security‑focused services have identified malicious activity associated with it. VirusTotal scans show that nine out of ninety‑five security vendors have flagged the domain, reinforcing the suspicion of abusive use. The domain’s nameserver information is unavailable (NS_NOT_FOUND), limiting further infrastructure attribution. Current status remains active, suggesting that the phishing campaign is ongoing. Defenders should treat marsheaven786.github.io as a high‑risk indicator, enforce blocking at perimeter and DNS layers, and monitor for related GitHub Pages subdomains that may be used in similar campaigns. Continuous re‑evaluation is advised, as additional detections may emerge from broader telemetry sources.