lavishahuria8[.]github[.]io

Analysis conducted on July 25, 2026 identifies lavishahuria8.github.io as an active phishing domain hosted on GitHub's infrastructure. The domain is currently flagged by at least one security blocklist (PhishDestroy) and is classified under Google Safe Browsing as engaging in social engineering. Infrastructure analysis reveals the domain resolves to the IP address 185.199.108.153, which is associated with GitHub's content delivery network. No nameservers are explicitly configured, consistent with GitHub Pages' default hosting behavior.

VirusTotal scans, conducted by 91 vendors, show no current detections as of the latest analysis. However, the absence of detections does not confirm the domain's safety, particularly given its presence on a security blocklist and Google Safe Browsing's classification. The domain remains active, with no evidence of takedown or remediation efforts. Registration details indicate the domain is managed through GitHub, Inc., which aligns with the observed hosting pattern.

Defenders should treat this domain as high-risk due to its confirmed presence on a security blocklist and its classification under social engineering by Google Safe Browsing. While the exact content of the page has not been analyzed, the available evidence suggests it is likely designed to deceive users. Organizations are advised to block access to this domain at the network level and monitor for related indicators of compromise. Additional scrutiny of GitHub-hosted pages with similar naming patterns may be warranted to identify potential phishing campaigns leveraging the platform's infrastructure.