akhileshyadav8[.]github[.]io

Akhileshyadav8.github.io is an active phishing domain hosted on GitHub Pages (185.199.108.153) and designed to harvest user credentials under the guise of a legitimate login portal. The campaign specifically targets victims through deceptive social engineering tactics, luring them to a fake authentication page that closely mirrors real services. Once credentials are entered, attackers gain immediate access to the victim’s account, enabling follow-on attacks such as fraud, identity theft, or corporate data breaches. This domain was flagged by PhishDestroy after analysis revealed it is not yet detected by most antivirus engines (12/95 on VirusTotal), registered under GitHub, Inc., and already blocked by OpenPhish and 1 additional security blocklist. Google Safe Browsing categorizes it as a SOCIAL_ENGINEERING threat due to its use of misleading content to trick users into revealing sensitive information. The domain uses a valid Let’s Encrypt SSL certificate to appear legitimate, further increasing the risk of successful deception. Users who have visited akhileshyadav8.github.io should immediately change passwords for any accounts exposed during the visit and enable multi-factor authentication where available. Avoid entering any personal or login information on this domain. If credentials were entered, assume compromise: review account activity for anomalies, revoke unauthorized sessions, and report the incident to your IT or security team. Monitor financial accounts and enable transaction alerts. Enterprises should block this domain at the firewall and email gateway to prevent further exposure.