salmanmuhammedzxo-prog[.]github[.]io

As of July 23, 2026, the domain salmanmuhammedzxo-prog.github.io is actively under investigation for involvement in generic phishing activity. The domain remains operational and has been specifically blocked by PhishDestroy, which indicates confirmed security concerns. It currently appears on one security blocklist, establishing that at least one external intelligence source has identified malicious or suspicious behavior associated with this infrastructure. The domain is registered through GitHub, Inc., and resolves to the IP address 185.199.108.153.

Notably, there are no valid nameservers found for this domain, which may be consistent with the hosting patterns of GitHub Pages subdomains. VirusTotal has scanned the domain with 95 vendors, with none currently flagging it; however, the lack of detections should not be interpreted as proof of safety, especially given the presence of blocklisting by a reputable security provider. The specific content and targeting of the phishing activity have not yet been analyzed, and there is no available data regarding the page title, scam kit, or impersonated brand.

As such, defenders should treat this domain as potentially malicious until further review is possible. Security teams are advised to block access to this domain at the network level and monitor for any related indicators of compromise. Continued investigation is warranted to better characterize the threat and determine the scope of malicious activity associated with this asset.