mirzamuhammadjawadalikazmi[.]github[.]io

This domain, mirzamuhammadjawadalikazmi.github.io, is currently active and has been classified as a generic phishing site. Registration data indicates the domain was created through GitHub, Inc., which also supplies its hosting infrastructure. DNS resolution points to the IP address 185.199.108.153, an address commonly associated with GitHub Pages services. The domain does not publish authoritative nameserver records, as the nameserver query returned no results. Multiple defensive feeds have flagged the site: PhishDestroy has added it to its blocklist, Google Safe Browsing labels it as a social‑engineering threat, and it appears on an additional security blocklist.

VirusTotal analysis shows that 16 of 91 scanned scanners reported malicious activity, reinforcing the suspicion of phishing behavior. No public SSL certificate details, HTTP response codes, or page title information are presently available, limiting the depth of content‑level analysis. Consequently, the primary observable indicators are the hosting attribution, the IP address, and the corroborated detections from independent vendors. Defenders should add the domain and its resolved IP to network‑level deny lists, enforce DNS sinkholing for the host, and monitor outbound traffic for connections to the GitHub Pages address.

Continuous re‑scanning with multi‑engine services is advised to capture any evolution of the payload or hosting changes. Analysts should also correlate any observed credential submission attempts with this indicator set, as the domain may be used to harvest login data for multiple online services. Because the site is hosted on a legitimate content‑delivery platform, traditional URL reputation checks may lag; therefore, real‑time threat intelligence feeds remain essential for timely mitigation. Until further forensic evidence is obtained, the domain should be treated as high‑risk and blocked in email gateway filters, web proxies, and endpoint protection suites.