veduu27[.]github[.]io

PhishDestroy identifies veduu27.github.io as an active credential-harvesting site posing an elevated risk to visitors. The page masquerades as a legitimate login portal to trick users into surrendering usernames, passwords, or multi-factor tokens.

This domain was flagged by 14 out of 95 VirusTotal security vendors, indicating substantial but not universal consensus on its malicious nature. It resolves to IP address 185.199.108.153, uses a Let’s Encrypt SSL certificate to appear trustworthy, and is hosted on GitHub Pages under the GitHub, Inc. registrar. Trust scores therefore remain mixed: the hosting provider’s benign reputation is undermined by the page’s overtly malicious payload.

Mitigation steps are straightforward: do not enter any credentials, payment data, or personal information on this page. Close the browser tab immediately. Report the URL to your email provider, browser vendor, and threat-intel platforms to expedite blocklisting. GitHub’s abuse channels can be used to request takedown, accelerating deactivation of the phishing host.