ahmadtazkaragi[.]github[.]io

PhishDestroy identifies ahmadtazkaragi.github.io as an active credential theft phishing domain operating at elevated risk. This GitHub-hosted page impersonates a legitimate religious resource while surreptitiously harvesting user credentials, posing a direct threat to personal account security.

This domain was flagged by 12 out of 95 VirusTotal security vendors, registered through GitHub, Inc. and resolving to IP 185.199.108.153. The Let’s Encrypt SSL certificate and GitHub infrastructure obscure its malicious intent, but the low trust score and absence from major allowlists reveal its true nature. Despite GitHub’s legitimate infrastructure, the page abuses GitHub Pages to host a fake login form designed to steal usernames and passwords under the guise of religious content.

To mitigate risk, immediately remove any bookmarks or browser shortcuts to this domain and clear cached credentials. Users who entered login details should change passwords on all accounts using the same credentials and enable two-factor authentication. Report the domain to GitHub via their abuse portal and scan local devices for malware using a reputable antivirus tool. Monitor financial and email accounts for suspicious activity and consider using a password manager to prevent reuse across sites.