julianabreu924-source[.]github[.]io

PhishDestroy identifies julianabreu924-source.github.io as an active credential-harvesting resource that is currently gathering user credentials under the guise of a benign profile repository. The domain was added to the OISD blocklist on 0bb6da and continues to resolve despite its detection status, indicating ongoing malicious activity likely targeting social-engineering victims. Google Safe Browsing categorization as SOCIAL_ENGINEERING underscores the intentional deception designed to harvest login credentials under false pretenses.

Security telemetry confirms this domain resolves to IP 185.199.108.153, operates under a Let’s Encrypt SSL certificate, and is registered through GitHub, Inc. As of today, julianabreu924-source.github.io remains undetected on VirusTotal with 18/95 engines flagging it; however, its presence on one active security blocklist and low global trust score reflect elevated risk. The domain leverages GitHub Pages infrastructure to maintain credibility while distributing spoofed login interfaces, increasing the likelihood of successful compromise for unsuspecting users.

To mitigate exposure, users are advised to avoid accessing any links or content hosted on julianabreu924-source.github.io and report the domain via browser safety tools. Organizations should update firewall and DNS blocklists to include this domain using the seed identifier 0bb6da. If credentials were entered on this site, immediately reset passwords across affected accounts and enable multi-factor authentication. Monitor accounts for unusual activity and consider deploying endpoint protection capable of detecting JavaScript-based credential harvesting payloads.