alabid234[.]github[.]io

The phishing domain alabid234.github.io, hosted on GitHub, Inc., has been flagged as malicious by 5 out of 91 VirusTotal vendors. It has been taken offline, but its brief period of activity highlights the ongoing threat posed by such domains. The domain was first detected on June 21, 2026, and was hosted on an IP address under Fastly, Inc. in the United States, with an SSL certificate issued by Let's Encrypt.

This domain's presence on public blocklists, including PhishDestroy and OpenPhish, underscores its malicious nature. With a platform risk score of 83 out of 100 and an abuse score of 39 out of 100, alabid234.github.io was a significant threat during its operational period. The use of a reputable hosting service like GitHub, coupled with a legitimate SSL certificate, may have lent it an appearance of credibility, potentially deceiving unsuspecting users.

Despite its current offline status, the domain's initial ability to evade detection by many antivirus vendors highlights the importance of early threat identification. Phishing domains often exploit the time gap between registration and inclusion in antivirus databases, a window that PhishDestroy's detection pipeline aims to close. This case exemplifies the need for continuous monitoring and rapid response to emerging threats in the digital landscape.