erfirojsiddiki[.]github[.]io

The domain erfirojsiddiki.github.io is currently classified as a high‑risk generic phishing site. Analysis as of July 29, 2026 shows that VirusTotal has recorded 16 positive detections out of 91 security vendors, indicating that a notable portion of scanning engines identify malicious behavior. The domain resolves to the IP address 185.199.108.153, which belongs to the GitHub Pages hosting infrastructure. Registration information lists GitHub, Inc. as the registrar, confirming that the domain is hosted on a legitimate code‑hosting platform but does not preclude abuse.

Google Safe Browsing flags the URL for social engineering, reinforcing the phishing classification. Independent threat‑intel feeds report that the domain is blocked by the PhishDestroy service and appears on at least one public security blocklist, further evidencing its malicious use. DNS queries return a placeholder value of NS_NOT_FOUND for the nameserver, suggesting that standard authoritative name server records are absent or obscured. No additional intelligence such as page titles, SSL certificate details, or HTTP response codes is available at this time, leaving the exact content and landing page behavior unverified.

Defenders should therefore treat any traffic to erfirojsiddiki.github.io as hostile. Recommended mitigations include adding the domain to URL filtering and DNS‑based blocklists, monitoring for new sub‑domains under the same registrar, and employing endpoint detection that references the observed VirusTotal detection count. Continuous re‑evaluation is advised, as changes to the hosting configuration or the appearance of new detection signatures could modify the threat profile.