suhaibajaz05[.]github[.]io

This domain, suhaibajaz05.github.io, is identified as a high-risk generic phishing site. Phishing domains of this nature are designed to mimic legitimate services or deploy deceptive content to harvest sensitive information such as login credentials, financial details, or personal data. The site may appear inactive (displaying a 'Site not found' page), but this is a common tactic to evade detection while retaining the ability to activate malicious payloads or redirect users to external phishing pages. Analysis indicates that the domain remains operational and poses a significant threat to unsuspecting visitors, particularly those who may be tricked into believing it is a legitimate GitHub Pages repository. Infrastructure analysis reveals that suhaibajaz05.github.io was registered on April 28, 2026, through GitHub, Inc., and resolves to the IP address 185.199.108.153, a known GitHub hosting endpoint. The domain is flagged by 14 out of 95 security vendors on VirusTotal, indicating a consensus among multiple threat intelligence sources regarding its malicious nature. Additionally, it appears on two security blocklists and is actively blocked by independent threat intelligence platforms. The SSL certificate, issued by Let's Encrypt (R12), does not mitigate the risk, as phishing sites frequently use valid certificates to appear trustworthy. The domain's creation date suggests it is relatively new, which aligns with common phishing campaign timelines aimed at exploiting current events or trends. If a user has visited suhaibajaz05.github.io or interacted with any content hosted on this domain, immediate action is required. First, disconnect the affected device from the network to prevent potential data exfiltration or further compromise. Run a full system scan using updated antivirus or endpoint detection tools to identify and remove any malicious artifacts. Users should also reset credentials for any accounts accessed while the device was exposed, particularly if login details were entered on the site or any linked pages. Monitor financial and personal accounts for unauthorized activity, and report the incident to relevant cybersecurity teams or incident response providers. Organizations should update their security policies to block this domain and its associated IP address (185.199.108.153) across all network defenses to prevent future exposure.