muhammad-ahmad-butt[.]github[.]io

The domain muhammad-ahmad-butt.github.io is currently flagged as a high-risk generic phishing site. Analysis indicates this domain is actively attempting to deceive users into disclosing sensitive information, though no specific brand impersonation has been confirmed. The domain remains operational as of the latest verification. Infrastructure analysis reveals the domain was registered on April 08, 2026, through GitHub, Inc., and resolves to the IP address 185.199.108.153, located in the United States. Security vendors on VirusTotal have flagged this domain, with 10 out of 95 detecting it as malicious. The domain appears on one security blocklist, and its SSL certificate is issued by Let's Encrypt (R12). The page title displayed is 'Site not found · GitHub Pages,' which may be an attempt to appear legitimate while masking its true intent. Current status confirms the domain remains active, posing a continued threat to users. Organizations and individuals are advised to block this domain at the network level and update endpoint protection rules to prevent access. Users encountering this domain should avoid interacting with it and report any suspicious activity to their security teams. Monitoring for similar GitHub Pages-hosted domains with recent creation dates is recommended to mitigate further risks.