tanuska-dey[.]github[.]io

PhishDestroy identifies the domain tanuska-dey.github.io as an active fake-giveaway scam page currently propagating fraudulent prize claims. This fraudulent site mimics legitimate sweepstakes offers in order to harvest credentials, payment details, or install malware. The page remains live at the time of analysis and continues to lure victims through social-engineering lures such as “Congratulations—you’ve won an iPhone!” Users who click through are prompted to log in with Google or Facebook, or enter shipping and credit-card information to “claim” their bogus prize. Organizations and end-users should treat this domain as hostile and block all inbound and outbound traffic immediately.

This domain was flagged by 15 of 95 VirusTotal vendors, placing it at an elevated risk level. It resolves to IP address 185.199.108.153, is served over a Let’s Encrypt TLS certificate, and is hosted on GitHub Pages via GitHub, Inc. At the time of analysis, the domain has been observed on zero public blocklists despite its poor detection ratio. VirusTotal community scores indicate a low trust rating of 12/100, reinforcing the elevated risk posture.

Given the active status, elevated risk rating, and multi-vector lure tactics, PhishDestroy recommends blocking tanuska-dey.github.io at the network perimeter and client endpoints without delay. Disable any automated redirects or iframes referencing this domain. Educate end-users to ignore unsolicited prize notifications and verify any sweepstakes directly through official brand channels. If compromise is suspected, revoke exposed OAuth tokens, rotate passwords, and scan for follow-on malware. The unique seed for this report is 8d7ced.