muhammadashraful119[.]github[.]io

This domain, muhammadashraful119.github.io, is currently flagged as a credential theft operation targeting users through deceptive login interfaces. Analysis confirms the domain remains active, despite presenting a 'Site not found' GitHub Pages default page, which may indicate a dormant or cloaked malicious infrastructure awaiting reactivation. Infrastructure analysis reveals the domain was registered through GitHub, Inc. on April 08, 2026, an anomalous future date suggesting potential manipulation or misconfiguration. It resolves to IP address 185.199.108.153, hosted within GitHub's US-based infrastructure. The domain is flagged by 15 of 95 security vendors on VirusTotal, and appears on one security blocklist. The SSL certificate is issued by Let's Encrypt (R12), a common but not inherently trustworthy authority often leveraged in malicious campaigns. Current status indicates the domain remains operational, though its visible content does not expose active threats. The discrepancy between the 'Site not found' page and security vendor detections suggests either a compromised repository, a staged attack infrastructure, or a takedown evasion tactic. Users are strongly advised to block all connections to this domain at the network level. Organizations should monitor for credential theft indicators, including unexpected authentication attempts or anomalous login patterns, and enforce multi-factor authentication for all accounts. The anomalous creation date warrants further investigation into registrar records for potential tampering or fraudulent registration practices.