muhammad-haris014[.]github[.]io

The domain muhammad-haris014.github.io was registered on April 08, 2026 through GitHub, Inc. It resolves to the IP address 185.199.108.153, which is owned by GitHub, Inc. and located in the United States. The site presents a default GitHub Pages 404 response with the page title "Site not found · GitHub Pages" and an HTTP status code of 404. The TLS certificate in use is issued by Let’s Encrypt (R12), confirming that the domain is served over HTTPS. Infrastructure analysis shows no custom nameservers; the nameserver information is listed as NS_NOT_FOUND, indicating that no authoritative name server records were returned. Security telemetry flags the domain as hostile.

PhishDestroy has listed the domain on its blocklist, and the domain appears on one additional security blocklist. Gridinsoft assigns a trust score of 0 out of 100, the lowest possible rating. VirusTotal reports that 16 of 94 scanning engines flag the domain as malicious, reinforcing the suspicion of abuse. The domain is currently marked as offline and has been taken offline, suggesting that any malicious content previously hosted may have been removed or the hosting account disabled. Despite the lack of visible content, the combination of a low trust score, multiple vendor detections, and blocklist listings indicates that the domain has been used for generic phishing activities.

The exact nature of the phishing campaign—such as targeted brand, credential‑stealing pages, or payload delivery—remains unknown because no page content is available for analysis. Defenders should continue to block the domain at perimeter defenses and monitor the associated IP address for any future activity. Because the domain is hosted on a shared GitHub Pages infrastructure, similar domains could be created by the same actor, so automated detection rules that flag newly registered GitHub Pages subdomains with low trust scores are advisable.