kiamdrive474exch[.]github[.]io

This domain, kiamdrive474exch.github.io, is confirmed to operate as a fraudulent Microsoft 365 login portal designed to harvest corporate credentials. Analysis of the page title, ENGAGE (Caribbean), and underlying infrastructure indicates targeted phishing activity aimed at business users in the Caribbean region. The site remains active as of the latest verification. Infrastructure analysis reveals the domain is hosted on GitHub Pages, resolving to IPv6 address 2606:50c0:8000::153 within AS54113 (Fastly, Inc.). The SSL certificate is issued by Let's Encrypt (R12), a common pattern observed in phishing campaigns leveraging free certificate authorities. Security vendors have flagged this domain in 12 of 95 VirusTotal scans, while it appears on one security blocklist. The combination of brand impersonation (Microsoft 365), geographic targeting (Caribbean), and use of legitimate hosting services increases the effectiveness of this phishing operation. Current status shows the site remains operational, posing an ongoing threat to users. Organizations should immediately block the domain at the network level and add the IPv6 address to firewall deny lists. Security teams are advised to monitor for login attempts from Caribbean-based employees to legitimate Microsoft 365 services following potential exposure. User awareness training should emphasize verification of login portals, particularly those using regional branding or unexpected geographic references.