kikaaphiwe-a11y[.]github[.]io

The domain kikaaphiwe-a11y.github.io was registered on May 16, 2026 through GitHub, Inc. and resolves to the IP address 185.199.111.153, which is owned by AS54113 Fastly, Inc. in the United States. HTTP requests to the site return a 404 status, indicating that the expected content is not being served at the time of analysis. The site presented a page title of "Netflix South Africa," and the threat classification is brand impersonation targeting Netflix. Infrastructure fingerprints show the use of Varnish, GitHub Pages, and Fastly as underlying technologies, consistent with typical GitHub‑hosted content delivery.

The SSL certificate is issued by Let’s Encrypt (R12), confirming the presence of HTTPS encryption but offering no guarantee of legitimacy. Security telemetry shows the domain is listed on a single blocklist and has been blocked by the PhishDestroy service. VirusTotal analysis recorded detections from eight of ninety‑one scanning engines, reinforcing the suspicion of malicious intent. Additional reputation data includes a Gridinsoft trust score of 0 out of 100, indicating an extremely low confidence in the domain’s safety.

Nameserver information is unavailable (NS_NOT_FOUND), limiting further DNS‑level attribution. Current operational status is offline, suggesting the phishing infrastructure has been taken down or is temporarily inactive. Defenders should continue to monitor the associated IP address and any related Fastly edge nodes for re‑use, enforce blocklist updates for the domain, and consider adding the domain to internal URL filtering policies. Because the site is no longer active, any residual risk is limited to potential future re‑deployment of the same infrastructure, so periodic re‑assessment is recommended.