aun-ali-12[.]github[.]io

The domain aun-ali-12.github.io has been identified as a source of generic phishing attacks targeting unsuspecting users. It does not appear to be associated with any well-known brand or a specific drainer kit, but it leverages GitHub's hosting services to create a malicious environment aimed at harvesting sensitive credentials through deceptive means.

Technical analysis reveals that this domain is flagged by 18 out of 95 security vendors on VirusTotal, marking it as highly suspicious. It resolves to the IP address 185.199.109.153 and is registered through GitHub, Inc. The domain employs a Let's Encrypt SSL certificate to appear legitimate. It has been blocked by reputable phishing blocklists such as OpenPhish and PhishingDB. Currently, it appears on two separate security blocklists. Although the exact creation date is not provided, the domain remains active and continues to pose a significant threat.

As of now, aun-ali-12.github.io remains active and accessible, increasing the risk to internet users. Security teams and end users are advised to continue blocking access and monitor for any phishing attempts linked to this domain. Given its high detection rate and presence on multiple blocklists, interaction with this domain should be strictly avoided. Prompt reporting to security platforms and updating web filters will help mitigate further exposure.