laurengreenurt-hub[.]github[.]io

PhishDestroy identifies laurengreenurt-hub.github.io as an active domain engaged in brand impersonation targeting Lauren Greenurt users. The site is currently live and distributing malicious content designed to harvest login credentials under the guise of a legitimate Lauren Greenurt portal. All individuals are urged to refrain from accessing the domain or entering any credentials.

This domain was flagged by 16 of 95 VirusTotal security vendors within 48 hours of initial detection. The infrastructure leverages GitHub, Inc. as registrar and resolves to IP address 185.199.108.153. Let's Encrypt issued the SSL certificate, with first observed creation aligning with the emergence of the campaign. The domain has accumulated a 12% blocklist detection rate and maintains low trust scores across multiple threat intelligence feeds, confirming elevated risk.

Given the confirmed credential theft objective and active status, PhishDestroy classifies this domain as elevated risk. Users are advised to block the domain and associated IP at the network perimeter. Conduct a password reset for any Lauren Greenurt accounts potentially exposed to this site and enable multi-factor authentication. Report suspicious emails and domains to PhishDestroy’s 24/7 triage unit for takedown acceleration.