muqeet377[.]github[.]io

The domain muqeet377.github.io is currently identified as a high-risk credential theft phishing site. While the page title indicates 'Site not found · GitHub Pages,' this may be a deliberate attempt to mislead users or a result of the domain being taken down or moved. The threat analysis suggests that the domain is actively used to harvest sensitive information, potentially through a well-crafted phishing page designed to mimic legitimate login interfaces.

Infrastructure analysis reveals that muqeet377.github.io is registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, which is located in the United States. The domain has been flagged by 15 out of 95 security vendors on VirusTotal, indicating a moderate level of detection. It is also listed on two security blocklists, PhishDestroy and PhishingDB, further corroborating the assessment of its malicious nature. The SSL certificate is issued by Let's Encrypt, which is common for both legitimate and malicious sites. The creation date of the domain is not provided, but the current status of the domain remains active.

The domain muqeet377.github.io is still active, posing a significant risk to users who may be lured to it through various phishing tactics such as email campaigns or social media links. Immediate actions recommended include blocking the domain at the network level, educating users about the risks of credential theft, and monitoring for any signs of unauthorized access to accounts. Despite the domain being flagged and listed on blocklists, there remains a risk that some users may still be deceived, emphasizing the need for ongoing vigilance and proactive security measures.