michaelzjcjames7068[.]github[.]io

Analysis of the domain michaelzjcjames7068.github.io indicates that it is actively being used in a generic phishing campaign as of the report date, July 29, 2026. The domain resolves to the IP address 185.199.108.153, which is associated with GitHub Pages hosting. Registration details show the domain was created through GitHub, Inc., confirming the use of a trusted registrar for malicious purposes. VirusTotal records reveal the domain has been scanned by 91 security vendors, and none reported a detection at the time of scanning; this absence of detections does not constitute a safety guarantee.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, demonstrating that at least one defensive feed has identified it as malicious. Nameserver information could not be retrieved (NS_NOT_FOUND), limiting insight into DNS configuration. No public Safe Browsing, OTX, SSL certificate, HTTP status, trust score, page title, or additional evidence links are currently available, leaving those aspects of the infrastructure unverified.

Defenders should treat the domain as high‑risk until further intelligence is gathered. Recommended actions include adding the domain to DNS and URL filtering policies, monitoring traffic to the associated IP for anomalous activity, and periodically re‑scanning the site with multiple sandboxes to capture any evolving payloads. Continuous observation of blocklist updates and threat‑intel feeds is advised to detect new indicators tied to this infrastructure.