zeyneptiryaki[.]github[.]io

PhishDestroy has flagged zeyneptiryaki.github.io as an active credential-harvesting phishing domain that mimics a legitimate profile to trick visitors into surrendering login details. The site is hosted on GitHub Pages under the username zeyneptiryaki, using a Let’s Encrypt SSL certificate to appear trustworthy. Behind the scenes, it resolves to IP address 185.199.108.153, where its actual content is served from GitHub’s infrastructure.

This domain was registered through GitHub, Inc., a common hosting provider that attackers abuse for rapid deployment of phishing pages. VirusTotal’s latest scan shows 16 out of 95 participating security vendors have already marked the URL as malicious, underscoring the elevated risk it poses to unwary users. The combination of a free hosting service, a valid SSL certificate, and evasive tactics points to a well-crafted trap intended to harvest usernames, passwords, or other sensitive data.

If you visited zeyneptiryaki.github.io, avoid entering any personal information on its pages. Change any reused passwords immediately, and consider enabling multi-factor authentication on your accounts. Report the domain to your IT team or security provider, and run a malware scan on the device you used to access the site. Monitor your accounts closely for signs of compromise, such as unexpected logins or unauthorized transactions.