wajihashafiq24[.]github[.]io

This domain, wajihashafiq24.github.io, is currently under investigation as a generic phishing site hosted on GitHub Pages infrastructure. Analysis indicates the domain remains active as of July 30, 2026, with no nameserver records found, which is atypical for legitimate GitHub Pages deployments. The domain resolves to IP address 185.199.108.153, a known GitHub Pages endpoint, suggesting the attacker is leveraging GitHub's free hosting service to distribute phishing content.

While the domain appears on one security blocklist and is blocked by PhishDestroy, it has not been flagged by any of the 91 vendors that scanned it on VirusTotal, though the absence of detections does not confirm safety. The registrar and hosting provider is GitHub, Inc., which may complicate takedown efforts due to the platform's policy of allowing user-generated content. No specific brand impersonation or phishing kit has been identified in the available data, and the exact content of the page remains unanalyzed.

Defenders should treat this domain as suspicious based on its presence on a security blocklist and atypical DNS configuration. Organizations are advised to monitor network traffic for connections to this domain, review logs for potential credential harvesting activity, and consider blocking the domain at the perimeter. Further analysis is required to determine the specific threat actor, target, or campaign associated with this infrastructure.