jeanvi12[.]github[.]io

PhishDestroy identifies jeanvi12.github.io as an active credential theft domain targeting unsuspecting users through deceptive login forms. The site masquerades as a legitimate service to harvest usernames and passwords, putting visitors at immediate risk of account compromise. With an elevated risk rating and confirmed malicious activity, this domain is unsafe for any interaction involving sensitive information.

This domain was flagged by 13 of 95 VirusTotal vendors and has appeared on 1 security blocklist. It resolves to IP 185.199.108.153, operates under a Let's Encrypt SSL certificate, and is registered through GitHub, Inc. While no creation date was disclosed, its infrastructure aligns with transient abuse patterns commonly leveraged in credential theft campaigns. The low trust scores and high detection rate underscore the severity of this threat.

Users are strongly advised to avoid jeanvi12.github.io entirely and report the domain to their security teams or platforms like PhishDestroy. If credentials were entered, change passwords immediately and enable multi-factor authentication where possible. Organizations should update firewall rules to block this domain at the network perimeter.