afilianbismillah-coder[.]github[.]io

The domain afilianbismillah-coder.github.io is presently flagged as an active generic phishing site with an elevated risk rating (status: active, risk level: elevated). Infrastructure analysis shows the site is hosted on GitHub Pages, as indicated by the registrar information and the resolved IP address 185.199.111.153, which belongs to the GitHub‑Pages network. VirusTotal has recorded 12 of 91 security vendors flagging the domain as malicious, providing independent confirmation of its malicious intent. The domain also appears on a single external blocklist and is actively blocked by the PhishDestroy service, reinforcing the consensus that it is being used for phishing operations.

Publicly available metadata such as page title, SSL certificate details, or brand targeting have not been disclosed, leaving the exact content and victim‑targeting strategy unknown. Nevertheless, the convergence of vendor detections, blocklist inclusion, and active blocking by a dedicated anti‑phishing platform constitutes strong evidence of a malicious phishing infrastructure. Defenders should add afilianbismillah-coder.github.io to URL filtering and DNS sink‑hole rules, and consider blocking the associated IP address 185.199.111.153 where feasible. Continuous monitoring of outbound connections to the domain, as well as ingestion of the domain into existing threat‑intel feeds, is recommended to detect any residual or future activity.

Given the elevated risk rating, security teams should treat any user‑initiated traffic to this host as suspicious and enforce multi‑factor authentication to mitigate credential compromise. Ongoing observation of VirusTotal and blocklist updates is advised to capture any changes in detection coverage. Incident response teams should also review recent authentication logs for signs of compromised credentials linked to this domain.