diluz07[.]github[.]io

PhishDestroy identifies diluz07.github.io as an active phishing domain designed to steal login credentials. The site masquerades as a legitimate service, luring victims into entering sensitive information such as usernames and passwords. Once harvested, these credentials are often used for further attacks, including account takeovers, financial fraud, or identity theft. The domain’s current configuration points to IP address 185.199.111.153, a GitHub Pages infrastructure address frequently abused by threat actors for low-cost hosting. This domain was flagged by 7 of 95 VirusTotal security vendors, indicating a significant but not universal consensus on its malicious nature. Registered through GitHub, Inc., the domain leverages a valid Let’s Encrypt SSL certificate to appear trustworthy, enhancing its credibility among unsuspecting users. Despite its legitimate hosting provider, the domain’s abuse for credential harvesting remains a clear and present threat. If you have visited diluz07.github.io, immediately change any passwords you may have entered and enable multi-factor authentication on all relevant accounts. Scan your device for malware using reputable antivirus software and monitor your accounts for unusual activity. Report the domain to your organization’s security team or to authorities such as Google Safe Browsing and the Anti-Phishing Working Group to help protect others from this threat.