alameenmuhd1[.]github[.]io

Analysis indicates that the domain alameenmuhd1.github.io is currently active and classified as a generic phishing site with an elevated risk rating. The domain is hosted on the GitHub Pages service, as indicated by the registrar information, and resolves to the IP address 185.199.109.153, which belongs to GitHub’s content‑delivery network. Infrastructure profiling shows that the IP is shared among many unrelated GitHub‑hosted sites, limiting the effectiveness of IP‑based blocking without collateral impact.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy feed, providing at least one independent indicator of malicious use. VirusTotal scans have returned detections from 11 of 91 security vendors, confirming that multiple AV engines have identified the domain as malicious. No additional public threat‑intelligence sources, such as Safe Browsing or OTX, are referenced in the available data, leaving the broader threat landscape around this domain uncertain.

Defenders should prioritize adding the fully qualified domain name to URL filtering and DNS sinkhole policies, enforce blocklist updates that include the PhishDestroy entry, and consider monitoring for future sub‑domain creation under the same GitHub account. Because the hosting provider is a legitimate service, takedown requests may need to follow GitHub’s abuse‑reporting procedures rather than standard registrar abuse channels. Continuous observation of the domain’s activity and correlation with endpoint telemetry are recommended to detect any credential‑harvesting attempts that may arise from this infrastructure.