ogvishesh.github.io: Confirmed Credential Harvesting Site

ogvishesh.github.io has been positively identified as a credential-harvesting phishing site operating at high risk. This GitHub Pages domain masquerades as a legitimate login interface to trick victims into surrendering sensitive credentials. PhishDestroy classifies the threat as high-risk due to the active infrastructure and confirmed malicious intent.

This domain was flagged by 14 of 95 VirusTotal security vendors, and it is currently blocked by OpenPhish and OISD. It resolves to IP address 185.199.108.153 and operates under a Let’s Encrypt SSL certificate to appear legitimate. The site is hosted on GitHub Pages and registered through GitHub, Inc., a detail that can mislead users into trusting the content. It has appeared on two public blocklists and remains active despite these detections, indicating persistent malicious use.

Mitigation for this credential-harvesting site requires immediate user action. Avoid visiting or interacting with ogvishesh.github.io under any circumstances. Ensure your browser and security tools are updated with the latest threat intelligence feeds that include this domain. Report any accidental access or suspicious login prompts to your IT security team immediately. If credentials were entered, change passwords immediately and enable multi-factor authentication on all related accounts. Monitor accounts for unauthorized activity and consider using a password manager with phishing protection to prevent future exposure.