alam-mohammad[.]github[.]io

PhishDestroy identifies alam-mohammad.github.io as an active credential theft phishing domain currently leveraging GitHub Pages hosting to impersonate legitimate brands and harvest user credentials. alam-mohammad.github.io was flagged by 16 of 95 VirusTotal vendors as a credential theft phishing domain. This domain is registered through GitHub, Inc. and resolves to IP address 185.199.108.153 using a Let's Encrypt SSL certificate. The domain was created through GitHub Pages, inheriting GitHub's infrastructure while hosting malicious content designed to mimic trusted brands for credential harvesting purposes. With 16 security vendors detecting malicious activity and an elevated risk level assigned, this domain demonstrates active threat potential against unsuspecting users. Current status indicates active credential theft operations through brand impersonation tactics. Technical indicators include the GitHub Pages infrastructure (185.199.108.153), Let's Encrypt certificate for HTTPS credibility, and 16/95 detection ratio across VirusTotal vendors. Organizations and individuals should immediately block alam-mohammad.github.io at network and endpoint levels. Users who may have interacted with this domain should change passwords for any accounts potentially exposed and enable multi-factor authentication where available. Report this domain to threat intelligence platforms and maintain updated blocklists to prevent further exploitation. The combination of GitHub hosting reliability with malicious content creates elevated risk requiring immediate defensive action.