ashiiashefa-jpg[.]github[.]io

PhishDestroy identifies ashiiashefa-jpg.github.io as an active credential-stealing phishing page currently distributing fake login forms to harvest usernames and passwords. This fraudulent site is designed to trick users into submitting sensitive information under false pretenses, typically mimicking well-known services or platforms to increase believability. Once credentials are captured, attackers gain unauthorized access to personal accounts, enabling identity theft, financial fraud, or further compromise of connected services. This domain was flagged by security researchers and blocked by OpenPhish, though it remains undetected on 95 VirusTotal engines as of now. It operates from IP 185.199.108.153 under a Let's Encrypt SSL certificate and is hosted via GitHub Pages, leveraging the platform's trusted infrastructure to appear legitimate. Registering through GitHub allows threat actors to rapidly deploy and rotate malicious content while exploiting the platform’s reputation. If you visited ashiiashefa-jpg.github.io, do not enter any login details or personal information. Disconnect from the site immediately, change passwords for any accounts you may have entered, and scan your device for malware. Report the domain to your IT team or security provider and monitor affected accounts for unusual activity. Use caution with any links received via email or untrusted sources—always verify URLs before clicking.