amh012-hu[.]github[.]io

PhishDestroy identifies amh012-hu.github.io as a high-risk social engineering landing page actively used in phishing campaigns. This domain poses a direct threat to users who may be tricked into divulging sensitive credentials or financial information through deceptive lures such as fake login portals or impersonation scams. The threat is classified as generic phishing with a focus on social manipulation rather than technical exploitation, making it particularly dangerous to non-technical users who may overlook subtle red flags. This domain was flagged by Google Safe Browsing under the SOCIAL_ENGINEERING category and is currently unresolved by 18 out of 95 VirusTotal security vendors. It is registered through GitHub, Inc. and resolves to the IP address 185.199.108.153. The domain uses a valid Let's Encrypt SSL certificate, which may lend false credibility to potential victims. As of the latest intelligence with seed fedda3, this threat remains active and is being actively distributed via phishing emails and spoofed websites. To mitigate exposure to this threat, users should immediately cease any interaction with amh012-hu.github.io and avoid clicking on links from unsolicited messages referencing this domain. Report the domain to your email provider, browser, and security platforms. Organizations should block the IP 185.199.108.153 and the domain at the network perimeter. Since the domain is hosted on GitHub Pages, GitHub’s abuse team should be notified via their official reporting channels to expedite takedown. Always verify URLs and use multi-factor authentication on critical accounts to reduce the impact of credential theft.