# sisayshimelash-collab.github.io — MALICIOUS > PhishDestroy warns sisayshimelash-collab.github.io is a fake login phishing page (17/95 vendors flagged it). Verify URLs and never enter credentials. ## Summary PhishDestroy identifies sisayshimelash-collab.github.io as an active fake login phishing page designed to steal user credentials. This GitHub-hosted domain poses an elevated risk to visitors who may unknowingly enter sensitive information into a spoofed interface. The threat actor behind this domain likely targets unsuspecting users with deceptive login prompts, potentially harvesting credentials for further exploitation. Technical analysis confirms the domain resolves to IP 185.199.108.153 and uses a Let's Encrypt SSL certificate to appear legitimate. This domain was flagged by 17 of 95 security vendors on VirusTotal, indicating widespread suspicion of malicious intent. Registered through GitHub, Inc., the domain exhibits signs of recent creation and is actively hosted on GitHub Pages, leveraging the platform's trusted reputation to evade detection. Users are advised to avoid interacting with this domain and verify any suspicious URLs through PhishDestroy before entering login credentials or personal information. If you have visited sisayshimelash-collab.github.io, cease all interaction immediately and inspect any entered credentials for unauthorized access. Revoke permissions for any accounts where you may have provided login details and enable multi-factor authentication where available. Report the domain to PhishDestroy for further analysis and share any suspicious activities with your security team. Remain vigilant against similar credential-harvesting campaigns and verify all URLs through trusted security tools before proceeding. ## Threat Details - Verdict: MALICIOUS - Site status: unknown (HTTP ?) ## Domain Intelligence - Registrar: GitHub, Inc. - IP: 185.199.108.153 ## Detection Status - VirusTotal: 17 vendors flagged - Google Safe Browsing: clean - Blocklists: 0 hits ## Evidence - Cloudflare Radar: https://radar.cloudflare.com/scan/804f2da8-4f47-4970-b838-6ac1712f05a2 - PhishDestroy: https://phishdestroy.io/domain/sisayshimelash-collab.github.io/ - LLM endpoint: https://phishdestroy.io/domain/sisayshimelash-collab.github.io/llm.txt ## If You Visited This Site 1. Change any passwords you may have entered 2. Enable 2FA on all related accounts 3. Monitor your accounts for unauthorized activity 4. Report to: FBI IC3, Europol, local authorities --- Report by PhishDestroy | https://phishdestroy.io/domain/sisayshimelash-collab.github.io/ Last updated: 2026-04-15