jackrunyon-lgtm[.]github[.]io

Analysis of the domain jackrunyon-lgtm.github.io, observed on July 31, 2026, indicates that it is being used in a generic phishing operation. The domain is hosted on GitHub Pages, resolving to IP 185.199.108.153, which belongs to GitHub, Inc. The registration record confirms the registrar as GitHub, Inc., consistent with the hosting provider. No name server records were returned (NS_NOT_FOUND), which is typical for GitHub‑hosted pages that rely on default DNS configuration. The domain has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist, demonstrating that external threat‑intelligence feeds have identified it as malicious.

VirusTotal reports that 91 scanning engines have examined the domain, and none have currently generated a detection; this absence of detections does not constitute a safety indication and may reflect the lack of payload or the use of static HTML content. Publicly available metadata such as SSL certificate details, HTTP response codes, page title, or Safe Browsing status are not present in the current intelligence set, leaving the content‑level analysis incomplete. Consequently, the exact phishing lure, credential‑capture mechanisms, or targeted brands remain unknown. The limited visibility into the page's HTML or JavaScript further hampers attribution of any specific phishing kit.

Given the confirmed hosting on a reputable platform, the presence on blocklists, and the lack of definitive technical indicators, defenders should treat the domain as high‑risk until a full content inspection is performed. Recommended actions include adding the domain to local deny lists, monitoring DNS queries for repeated resolutions to 185.199.108.153, and employing automated URL scanning tools to capture the page’s content for signature generation.