lucas-henriquedias[.]github[.]io

The domain lucas-henriquedias.github.io, hosted by GitHub, Inc., is identified as a phishing threat. It is flagged as malicious by 2 out of 91 vendors on VirusTotal and appears on two public blocklists, including PhishDestroy and OpenPhish. Although currently offline, the domain was first detected on June 22, 2026, and has an abuse score of 38 out of 100.

This domain was hosted on an IP address provided by Fastly, Inc. in the United States. The SSL certificate was issued by Let's Encrypt, indicating a potential attempt to appear legitimate and secure, a common tactic used in phishing schemes. The domain's presence on public blocklists suggests it was actively involved in malicious activities before being taken down.

Phishing domains like lucas-henriquedias.github.io exploit the time gap between domain registration and detection by antivirus databases. With only two vendors flagging it as malicious, the domain likely operated in the critical early hours of its lifecycle before being detected and reported. Such domains often target unsuspecting users by mimicking trusted platforms, aiming to harvest sensitive information.