mauricio-flores[.]github[.]io

On 29 July 2026, mauricio-flores.github.io was observed as an active generic phishing threat with elevated risk. The domain is hosted on GitHub Pages, as indicated by the registrar information 'Registered through: GitHub, Inc.' and the resolved address 185.199.108.153, which belongs to the GitHub Pages infrastructure. VirusTotal has recorded 15 positive detections out of 91 scanned security vendors, confirming that multiple independent scanners classify the domain as malicious.

The domain is listed on a single security blocklist and is explicitly blocked by the PhishDestroy service, providing additional corroboration of its abusive nature. No authoritative nameserver records are available (NS_NOT_FOUND), which limits the ability to perform deeper DNS‑based reputation checks. Aside from the registrar and IP association, no public SSL certificate details, HTTP response codes, Safe Browsing entries, or Open Threat Exchange (OTX) reports are currently available for this host, leaving those vectors unverified.

Consequently, the primary evidence supporting the phishing designation consists of the VirusTotal vendor detections, blocklist inclusion, and the PhishDestroy block. Defenders should treat any traffic to mauricio-flores.github.io as hostile, enforce network‑level blocking, and monitor for any additional indicators that may emerge, such as URL redirections, payload downloads, or credential‑stealing forms. Continuous re‑evaluation is recommended, given the limited DNS visibility and the absence of SSL or HTTP metadata, which could change if the attacker modifies the hosting configuration.