jihadislam-jr[.]github[.]io

This domain is flagged as a high-risk credential phishing endpoint targeting users through social engineering tactics. Analysis indicates the threat type is specifically classified as generic_phishing with a focus on harvesting login credentials, financial details, or other sensitive personal information. The domain remains active and operational as of the latest verification. Infrastructure analysis reveals the following technical indicators: the domain jihadislam-jr.github.io is registered through GitHub, Inc., and currently resolves to the IP address 185.199.108.153. VirusTotal reports 0 detections out of 95 engines, suggesting the domain has not yet been widely flagged by security vendors. The SSL certificate is issued by Let's Encrypt, a common provider for both legitimate and malicious sites. Google Safe Browsing explicitly flags this domain under the SOCIAL_ENGINEERING category, confirming its use in deceptive practices designed to trick users into divulging confidential information. Mitigation steps for this specific threat type include immediate blocking of the domain and its associated IP address (185.199.108.153) at the network perimeter. Security teams should deploy endpoint protection rules to prevent access to jihadislam-jr.github.io and monitor for any attempts to contact this domain. User awareness training should emphasize the risks of social engineering attacks, particularly those impersonating legitimate services or urgent requests. Additionally, organizations should review logs for any prior connections to this domain and investigate potential data exposure. Given the domain's hosting on GitHub Pages, administrators should also assess whether similar phishing campaigns are leveraging other GitHub-hosted subdomains.