muhammad-rehan126[.]github[.]io

The domain muhammad-rehan126.github.io, hosted by Fastly, Inc., has been identified as a phishing threat with 10 out of 91 VirusTotal vendors flagging it as malicious. Despite its current offline status, the domain was detected by PhishDestroy on June 21, 2026, indicating its recent activity in phishing operations. The domain's presence on a public blocklist and its high platform risk score of 93 out of 100 further underscore its threat level.

This domain exploits GitHub's platform, leveraging its infrastructure to host malicious content. The use of Let's Encrypt for SSL certification suggests an attempt to appear legitimate and secure to potential victims. The hosting IP, located in the United States, is part of the Fastly, Inc. network, which is known for its high-performance content delivery network services.

PhishDestroy's early detection of this domain highlights the critical gap between domain registration and antivirus database updates. This period often spans 24 to 72 hours, during which malicious actors can exploit vulnerabilities before being flagged by traditional security measures. The abuse score of 38 out of 100 reflects the domain's involvement in harmful activities, reinforcing the importance of proactive threat intelligence to mitigate risks associated with such phishing domains.