mshuja682-rgb[.]github[.]io

Analysis of mshuja682-rgb.github.io indicates that the domain is actively serving a generic phishing payload and remains unresolved in terms of the specific brand it attempts to impersonate. The domain resolves to the IP address 185.199.108.153, which is owned by GitHub, Inc., confirming that the site is hosted on the GitHub Pages infrastructure. Registration details show the domain was created through GitHub, Inc., and no alternative nameserver records were found (NS_NOT_FOUND). The domain is currently listed on one external security blocklist and has been flagged by the PhishDestroy blocking service, confirming that at least one reputable anti‑phishing feed has identified it as malicious. VirusTotal reports indicate that the URL was scanned by 95 independent vendors, none of which returned a detection at the time of analysis; however, the absence of detections does not equate to safety and should be interpreted as a lack of current consensus among scanners. No SSL/TLS certificate details, HTTP response codes, page titles, or additional threat intelligence identifiers (such as OTX tags or kit signatures) are available in the supplied data, leaving the visual content and specific phishing technique unverified. Defenders should block or sinkhole the domain at the network perimeter, add it to local deny lists, and monitor for any related traffic to the associated IP address. Continuous re‑evaluation is recommended, as the domain’s status is listed as "active" and could be leveraged for credential harvesting or further malicious campaigns pending additional observation.