# salmann-khan.github.io — MALICIOUS

> salmann-khan.github.io is a credential theft domain flagged by 6 of 95 VirusTotal vendors. Hosted on GitHub with Let's Encrypt SSL, it poses elevated phishing.

## Summary
PhishDestroy identifies salmann-khan.github.io as an active credential theft domain leveraging GitHub Pages infrastructure to harvest user credentials under the guise of a legitimate service.

This domain resolves to IP 185.199.108.153 and operates with a valid Let's Encrypt SSL certificate, increasing its deceptive authenticity. Registered through GitHub, Inc., it has been flagged by 6 of 95 VirusTotal security vendors, indicating a significant but not overwhelming detection rate across major security platforms. The combination of legitimate hosting infrastructure with active malicious intent creates an elevated threat profile.

Current status remains active as of threat intelligence gathered on 0322be. Given the credential theft nature of this campaign, users should avoid interacting with this domain or submitting any credentials. Organizations should block this domain at network gateways and monitor for any associated credential leaks. Immediate takedown requests should be filed with GitHub's abuse team given the abuse of their Pages service for malicious purposes.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: GitHub, Inc.
- IP: 185.199.108.153

## Detection Status
- VirusTotal: 6 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/f9dfaf7c-9b99-487d-aff2-762b8b383420
- PhishDestroy: https://phishdestroy.io/domain/salmann-khan.github.io/
- LLM endpoint: https://phishdestroy.io/domain/salmann-khan.github.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/salmann-khan.github.io/
Last updated: 2026-03-24