# rishh16.github.io — SUSPICIOUS

> rishh16.github.io mimics a credential harvesting portal. VirusTotal shows 0/95 detections as of now. Users should avoid entering any details and report.

## Summary
PhishDestroy identifies a currently active malicious domain named rishh16.github.io, which is being leveraged to host a counterfeit login interface designed to steal user credentials. This fraudulent portal mimics legitimate authentication pages, tricking visitors into submitting sensitive information such as usernames and passwords. The domain is hosted on GitHub Pages infrastructure, resolving to IP 185.199.108.153, and currently operates without detection on 95 VirusTotal engines.  

This domain was flagged through automated analysis pipelines and confirmed as a generic phishing host. VirusTotal reports zero detections despite active abuse, indicating that signature-based defenses have not yet caught up to this threat. The domain is registered via GitHub, Inc. and secured with a Let's Encrypt SSL certificate, adding deceptive legitimacy. Due to its rapid deployment on a trusted platform and low initial detection, the risk profile is elevated and under active investigation.  

If you have visited rishh16.github.io and entered any login details, immediately change passwords on affected accounts and enable multi-factor authentication. Scan devices for malware using updated antivirus tools, especially if the site requested additional personal information. Report the incident to your IT security team or platform administrators with full URLs and timestamps. Avoid interacting with similar domains hosted on GitHub Pages or other reputable services without verification. Stay vigilant — trust only verified, bookmarked login portals and never follow links from unsolicited messages.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: GitHub, Inc.
- IP: 185.199.108.153

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/rishh16.github.io
- PhishDestroy: https://phishdestroy.io/domain/rishh16.github.io/
- LLM endpoint: https://phishdestroy.io/domain/rishh16.github.io/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/rishh16.github.io/
Last updated: 2026-04-07