shaista-malik[.]github[.]io

The domain shaista-malik.github.io is identified as a high-risk generic phishing site and is currently active. It impersonates GitHub, likely to deceive users into providing sensitive information such as login credentials or personal data.

Analysis indicates that the domain has been flagged by 9 of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain is registered through GitHub, Inc. and resolves to the IP address 185.199.108.153, which is located in the United States. The domain was created on April 12, 2026, and it appears on 1 security blocklist. The SSL certificate is issued by Let's Encrypt, which is a common certificate authority for legitimate and malicious sites alike. The page title 'Site not found · GitHub Pages' may be an attempt to mimic a genuine GitHub Pages error, further misleading users.

The domain is still active and poses a high risk of credential theft and other phishing-related threats. Security professionals and end-users are advised to exercise extreme caution when encountering this domain. It is recommended to verify the URL and avoid clicking on any links or entering personal information. Additionally, organizations should consider blocking this domain at the network level and educating employees about the dangers of phishing attacks. Regular security audits and updates to phishing detection systems can also help mitigate the risk posed by this domain.