jubril879[.]github[.]io

PhishDestroy identifies jubril879.github.io as a credential theft domain designed to trick users into surrendering login details. This site masquerades as a legitimate service to harvest credentials, putting visitors at high risk of account compromise and identity theft. The domain resolves to IP 185.199.108.153 and operates under a valid Let's Encrypt SSL certificate, increasing its perceived legitimacy. Credential theft sites like this often appear in phishing campaigns targeting well-known brands or services, aiming to capture usernames, passwords, and other sensitive data. This domain was flagged by 15 out of 95 VirusTotal security vendors, including Google Safe Browsing, which classifies it under SOCIAL_ENGINEERING. It is hosted on GitHub Pages, a legitimate web hosting service, which adds a layer of deception since visitors may assume the site is trustworthy due to its association with GitHub. However, the presence of a credential theft payload indicates malicious intent. GitHub has not taken down the site at the time of this report, meaning it remains active and accessible to potential victims. If you visited jubril879.github.io, assume your credentials may have been compromised. Immediately change passwords for any accounts accessed from this site or entered into its forms. Enable multi-factor authentication where possible and scan your device for malware. If you reused passwords across multiple sites, update those accounts immediately. Report the domain to your browser’s security team or PhishDestroy to help prevent others from falling victim.