mohdsaad961[.]github[.]io

PhishDestroy identifies mohdsaad961.github.io as an active phishing domain designed to harvest user credentials through fraudulent login forms. This domain was flagged by 14 out of 95 VirusTotal security vendors, indicating substantial but not universal consensus on its malicious nature. Hosted on GitHub Pages via IP 185.199.108.153 and secured with a Let's Encrypt SSL certificate, it appears to be a rapidly deployed credential harvesting page mimicking legitimate login portals. Given GitHub's infrastructure, attackers exploit trusted domains to bypass traditional filtering. Users who visited this site may have unknowingly submitted sensitive login details to threat actors. PhishDestroy recommends immediately changing passwords if credentials were entered, scanning devices for malware, and avoiding any further interaction with this domain. Report the site to your browser or security provider for blacklisting.