mohdshadav[.]github[.]io

This domain, mohdshadav.github.io, is identified as a generic phishing site targeting users through deceptive GitHub Pages hosting. Analysis indicates the threat type involves credential harvesting or malware distribution, though no specific brand impersonation has been confirmed. The domain remains active and poses a high risk to unsuspecting visitors. Infrastructure analysis reveals the domain was created on June 12, 2026, and is registered through GitHub, Inc. It resolves to the IP address 185.199.109.153 and is currently flagged by 16 of 95 security vendors on VirusTotal. The domain appears on one security blocklist and is blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt (R12), a common certificate authority for both legitimate and malicious sites. The page title, 'Site not found · GitHub Pages,' suggests either a placeholder or an attempt to evade detection by appearing inactive. As of the latest assessment, mohdshadav.github.io remains active and unremediated. Organizations and users are advised to block the domain at the network level and add it to endpoint protection rules. Security teams should monitor for connections to 185.199.109.153 and review logs for any interaction with this domain. If credentials or sensitive data were entered on this site, immediate password resets and multi-factor authentication enforcement are recommended.