mauggz[.]github[.]io

On July 29 2026, the domain mauggz.github.io was observed hosting a generic phishing infrastructure. The domain is registered through GitHub, Inc., indicating use of the GitHub Pages service for hosting. DNS queries resolve to the IP address 185.199.108.153, which is part of the GitHub Pages hosting network.

No authoritative nameserver records were found, consistent with GitHub’s default DNS configuration. VirusTotal has flagged the domain in 12 of 91 scanned security engines, suggesting that a notable minority of AV products have identified malicious behavior associated with the host. The domain appears on a single external security blocklist and has been actively blocked by the PhishDestroy mitigation service, confirming that at least one commercial sinkhole considers it abusive.

No additional intelligence such as page titles, brand targeting, or SSL certificate details is presently available, so the precise lure or victim profile cannot be confirmed. Defenders should add mauggz.github.io to URL filtering and DNS blocklists, monitor outbound connections to the associated IP range, and consider isolating traffic to GitHub Pages subdomains that are not part of authorized corporate use. Continuous re‑evaluation is recommended, as the hosting provider can be leveraged to serve new malicious pages without changing the underlying domain.