alihassanazad8245[.]github[.]io

Analysis of the domain alihassanazad8245.github.io indicates active phishing infrastructure hosted on GitHub Pages, a platform frequently exploited for credential harvesting and social engineering campaigns. The domain resolves to the IP address 185.199.108.153, which is part of GitHub's content delivery network (ASN 36459) and commonly associated with legitimate and malicious repositories alike. As of August 7, 2026, Google Safe Browsing has flagged this domain for social engineering, a classification that aligns with phishing activity targeting unsuspecting users through deceptive content. Infrastructure review reveals the domain appears on two independent security blocklists, including PhishDestroy and OpenPhish, both of which specialize in real-time phishing detection.

VirusTotal reports a single detection from 91 security vendors, suggesting limited but present recognition of malicious intent. The absence of broader vendor confirmation does not imply safety; rather, it reflects the domain's recent or targeted nature, which may not yet be widely disseminated in threat intelligence feeds. No registrar details or SSL certificate anomalies are present in the available data, as the domain operates under GitHub's subdomain structure (github.io), which does not require traditional registration. This hosting model complicates takedown efforts, as GitHub must be directly engaged to remove malicious repositories.

The exact content of the phishing page remains unanalyzed, though the social engineering classification from Google Safe Browsing implies an attempt to deceive users into divulging sensitive information or performing unintended actions. Defenders are advised to block the domain at the network level and monitor for related GitHub Pages subdomains exhibiting similar patterns. Given the elevated risk level and active status, organizations should treat this domain as a confirmed phishing threat until GitHub confirms remediation.