kalebibrahim15-eng[.]github[.]io

This domain, kalebibrahim15-eng.github.io, is under active investigation for generic phishing activity as of August 4, 2026. Infrastructure analysis reveals it is hosted on GitHub Pages, a legitimate service often abused for low-cost phishing deployment due to its free SSL certificates and reputable domain structure. The domain appears on one security blocklist and is currently blocked by PhishDestroy, though the specific detection criteria and brand impersonation—if any—remain unconfirmed.

No detections were reported by the 91 vendors that scanned the domain on VirusTotal, though this absence does not confirm safety, particularly given GitHub Pages' transient nature and the potential for delayed or missed detections by automated systems. The exact content hosted on this domain has not been analyzed, and no page title, brand target, or phishing kit has been identified in available intelligence. The domain's structure—using a GitHub username followed by a hyphenated string—aligns with patterns observed in other phishing campaigns leveraging GitHub Pages, where attackers create disposable subdomains to evade takedowns or blocklist updates.

Defenders should treat this domain as suspicious based on its presence on a security blocklist and its hosting context, rather than relying solely on VirusTotal results. Monitoring for additional detections, behavioral analysis of any observed redirects or payloads, and correlation with other GitHub Pages-based phishing domains are recommended. If encountered in logs or user reports, the domain should be blocked pending further analysis, particularly given its active status and the potential for credential harvesting or malware distribution.