chiemerievictor00-blip[.]github[.]io

PhishDestroy identifies chiemerievictor00-blip.github.io as an active credential harvesting phishing domain impersonating legitimate login portals to steal user credentials. This GitHub-hosted page lures victims through social engineering tactics, tricking them into submitting sensitive information that is immediately exfiltrated to attacker-controlled infrastructure. The threat actors behind this campaign leverage GitHub Pages' trusted domain reputation to bypass email security filters, making it particularly effective against users accustomed to recognizing official services. This domain was flagged by 15 of 95 VirusTotal security vendors, indicating substantial risk potential. Google Safe Browsing lists the domain under SOCIAL_ENGINEERING categories, while VirusTotal's detection rate demonstrates limited but concerning recognition. Registered through GitHub, Inc., the domain resolves to IP address 185.199.109.153 using a Let's Encrypt SSL certificate, which may further deceive security-conscious users. The combination of these indicators suggests a well-constructed phishing campaign with potential for widespread compromise. Users who visited this domain should immediately change any credentials entered on the page, as they may have been captured by the threat actors. Even if no credentials were submitted, we recommend scanning local systems with updated antivirus tools due to potential follow-on malware delivery. Monitor financial accounts and enable multi-factor authentication wherever possible. Report this domain to your security team and consider blocking both the domain and IP address 185.199.109.153 at your network perimeter. Exercise heightened caution when receiving unexpected links, particularly those hosted on free web service domains.