momomoo34[.]github[.]io

The domain momomoo34.github.io, previously hosted on GitHub, is identified as a phishing threat. It has been flagged as malicious by 7 out of 91 vendors on VirusTotal and is listed in one public blocklist, specifically PhishDestroy. The domain was first detected on June 20, 2026, and has since been taken down. This quick takedown reflects its rapid identification and response by security teams.

Despite being offline now, the domain's initial activity posed a significant risk, as indicated by a platform risk score of 83 out of 100. The hosting IP, 185.199.108.153, is located in the United States and is managed by Fastly, Inc. The SSL certificate for the domain was issued by Let's Encrypt, a common choice for both legitimate and malicious sites due to its ease of access and cost-free service.

The phishing operation behind momomoo34.github.io highlights the ongoing challenge of detecting and neutralizing threats quickly. The domain's presence on VirusTotal with 7 detections underscores the importance of early detection systems like those employed by PhishDestroy. Such systems are crucial in identifying threats during the critical early window before they are widely recognized by antivirus vendors. This case exemplifies the need for continuous monitoring and swift action to mitigate potential harm from phishing domains.