shajahan-18[.]github[.]io

PhishDestroy identifies the active domain shajahan-18.github.io as a suspected credential-harvesting site impersonating a legitimate login portal. This GitHub-hosted page (185.199.108.153) has not yet been flagged by security vendors, showing 0 detections on VirusTotal out of 95 scans. The domain remains unblocked by major threat intelligence platforms, increasing the risk of successful deception for unsuspecting users. This domain was registered through GitHub, Inc. and leverages Let's Encrypt SSL certificates to appear legitimate. With no current blocks in VirusTotal or other threat feeds, it poses a credible risk of harvesting credentials or sensitive data. The IP 185.199.108.153 is associated with GitHub Pages infrastructure, complicating network-level detection for organizations relying solely on IP blacklists. If you have visited shajahan-18.github.io, cease all further interaction with the site immediately. Review account credentials for potential exposure, enable multi-factor authentication on all related accounts, and report the domain to your security team. Use a reputable password manager to detect fake login pages in the future, and verify URLs carefully before entering any sensitive information.