ibrahimkamal5[.]github[.]io

ibrahimkamal5.github.io is a generic phishing domain currently flagged as active with a high risk level. This site, hosted through GitHub, Inc., is not impersonating a specific brand but is designed for broad credential theft or data harvesting. The domain was created on April 09, 2026, and resolves to IP address 185.199.108.153, which is associated with GitHub Pages. Despite its recent creation, it has already appeared on two security blocklists and has been flagged by 15 out of 95 VirusTotal security vendors, indicating widespread detection across the cybersecurity community.

The site's SSL certificate is issued by Let's Encrypt (R12), which is common for legitimate sites but also used by malicious actors. The page title reads "Site not found · GitHub Pages," suggesting either the content is hidden or the phishing landing page is served dynamically. PhishDestroy identifies this domain as a generic phishing threat, meaning it may attempt to trick users into entering sensitive information through deceptive login forms or social engineering. The high risk level is based on the combination of recent registration, blocklist presence, and vendor flags.

As the domain remains active, users should avoid visiting it or interacting with any content hosted there. If you have already visited the site, change passwords for any accounts that may have been compromised and monitor for suspicious activity. Report the domain to your security team or block it at the network level. PhishDestroy recommends exercising caution with any GitHub Pages domains that appear out of context, as they can be easily created and abused for phishing campaigns.