mohsin226240[.]github[.]io

This analysis identifies the domain mohsin226240.github.io as being associated with a generic_phishing classification. The domain is currently active and hosted under GitHub Pages infrastructure, presenting itself with a default error page titled 'Site not found · GitHub Pages'. Despite the benign appearance, the classification indicates malicious intent consistent with phishing deployment patterns leveraging trusted hosting services to reduce suspicion.

Technical intelligence shows the domain is flagged by 16 of 95 VirusTotal security vendors, indicating significant detection consensus for phishing behavior. It appears on 1 security blocklist and is additionally blocked by PhishDestroy. The domain resolves to IP 185.199.108.153 located in the United States under GitHub, Inc. infrastructure. It uses an SSL certificate issued by Let's Encrypt (R12). Domain registration date is April 09 2026, indicating recent creation consistent with disposable phishing infrastructure. Google Safe Browsing also classifies the domain as phishing, reinforcing the malicious assessment.

Current status remains active, meaning the infrastructure is still capable of serving or redirecting phishing content. Even though the page currently displays a default GitHub Pages 'Site not found' message, the underlying hosting can be rapidly repurposed, which is a common tactic for staging or rotating phishing payloads. It is recommended to block the domain at DNS and web proxy layers, maintain the existing blocklist entry, and monitor the associated IP 185.199.108.153 for additional malicious subdomains or repositories. Security teams should treat any requests to this domain as high-risk, implement user awareness controls, and ensure email or web filters include the 16/95 detection intelligence and Safe Browsing classification in enforcement policies.