ameen123shah[.]github[.]io

PhishDestroy identifies ameen123shah.github.io as an active credential harvesting phishing site with an elevated risk profile. This GitHub-hosted domain is designed to deceive users into submitting sensitive login credentials through a spoofed interface. The threat is not generic phishing but specifically targets authentication data, posing direct risks to account takeover and identity theft.

This domain was flagged by 15 out of 95 VirusTotal security vendors, indicating substantial malicious activity. It resolves to IP 185.199.108.153 and is blocked by OpenPhish. Registered through GitHub, Inc., it leverages a Let's Encrypt SSL certificate to appear legitimate. The domain appears on 1 security blocklist, further confirming its malicious nature. These technical indicators collectively demonstrate a coordinated effort to impersonate trusted services for fraudulent data collection.

To mitigate credential harvesting risks, users should avoid interacting with this domain entirely. Organizations should block access at the network level using the IP and blocklist data provided. If credentials were exposed, users must rotate passwords immediately and enable multi-factor authentication where possible. Report this domain to GitHub's abuse team and relevant cybersecurity platforms to accelerate takedown efforts.