salluexez[.]github[.]io

PhishDestroy identifies salluexez.github.io as a high-risk fake login phishing site designed to steal user credentials. This domain mimics legitimate login interfaces to trick visitors into entering sensitive information such as usernames, passwords, or financial details. Once captured, attackers can misuse this data for identity theft, unauthorized account access, or financial fraud. The site is particularly dangerous because it leverages GitHub's trusted infrastructure, which may lull users into a false sense of security.

This domain was flagged by PhishDestroy after it appeared on 1 security blocklist and was detected by OpenPhish and Google Safe Browsing under the SOCIAL_ENGINEERING category. VirusTotal analysis revealed that 16 out of 95 security vendors have marked this site as malicious. The domain is registered through GitHub, Inc., and resolves to IP address 185.199.108.153. It holds a valid SSL certificate issued by Let's Encrypt, which further enhances its deceptive appearance. These technical indicators, combined with its active status, confirm the high-risk nature of this phishing campaign.

If you have visited salluexez.github.io, take immediate action to secure your accounts. First, change the passwords for any credentials you may have entered on the site. Enable multi-factor authentication (MFA) wherever possible to add an extra layer of security. Run a full antivirus scan on your device to check for any malware that could have been installed. Report the incident to your organization’s security team or relevant platform support if the credentials entered are work-related or tied to critical services. For future protection, always verify website URLs and use tools like PhishDestroy to confirm the legitimacy of web pages before entering sensitive information.