gmbthegreat[.]github[.]io

This domain, gmbthegreat.github.io, is identified as a credential harvesting phishing endpoint leveraging GitHub Pages infrastructure. The site impersonates trusted platforms to deceive users into submitting login credentials, payment details, or other sensitive information through fraudulent forms. Analysis indicates the domain is designed to exploit the perceived legitimacy of GitHub-hosted content, increasing the likelihood of successful social engineering attacks against unsuspecting victims. Infrastructure analysis reveals the domain resolves to IP address 185.199.108.153, hosted under GitHub, Inc. in the United States. It appears on 1 security blocklist and is flagged by 14 out of 95 security vendors on VirusTotal, indicating a high-confidence malicious classification. The SSL certificate is issued by Let's Encrypt (R12), providing encrypted connections that may further mislead users into trusting the site. The domain is registered through GitHub, Inc., and remains actively serving phishing content despite its deceptive 'Site not found' page title, which may be a placeholder or cloaking mechanism. Users who have visited gmbthegreat.github.io should immediately revoke any credentials entered on the site, particularly if login or financial information was submitted. Monitor accounts for unauthorized activity and enable multi-factor authentication where available. Network administrators should block the domain and its resolving IP (185.199.108.153) at the perimeter. If browser sessions were active during the visit, clear cached data and run a full antivirus scan to detect potential post-exploitation artifacts. Report the domain to relevant security teams for further investigation and takedown coordination.