mohsin-ghub[.]github[.]io

The domain mohsin-ghub.github.io, hosted on GitHub Pages, has been identified as a phishing threat. Despite being offline now, it was flagged by 15 out of 94 vendors on VirusTotal, highlighting its malicious nature. The domain was registered and detected by PhishDestroy on April 14, 2026, and was swiftly taken down, reflecting effective monitoring and response.

The site masqueraded as a legitimate GitHub page, likely aiming to deceive users into providing sensitive information. Its hosting on a reputable platform like GitHub Pages could have lent it an air of legitimacy, potentially increasing the risk of successful phishing attacks. The domain's SSL certificate was issued by Let's Encrypt, a common choice for phishing sites due to its ease of access and cost-free nature.

PhishDestroy's detection capabilities identified this threat on the same day it was created, underscoring the importance of early detection in combating phishing attacks. The platform risk score of 93 out of 100 indicates a high potential for harm, while an abuse score of 32 out of 100 suggests moderate malicious activity. The domain's presence on a public blocklist further emphasizes its threat level. This case demonstrates the ongoing challenges of phishing attacks leveraging reputable platforms and the critical need for vigilance and rapid response.