ashishgehar[.]github[.]io

This domain, ashishgehar.github.io, is confirmed to be a fake login portal designed to steal user credentials. The site poses a high risk to individuals and organizations, as it mimics legitimate login pages to trick users into revealing sensitive information such as usernames, passwords, and potentially two-factor authentication codes. This can lead to unauthorized access, data breaches, and financial loss.

Analysis indicates that 13 out of 95 security vendors on VirusTotal flag this domain as malicious. The domain was created on April 09, 2026, and is registered through GitHub, Inc. The page title 'Site not found · GitHub Pages' suggests that the domain may be a compromised or maliciously created GitHub Pages site. The domain resolves to the IP address 185.199.108.153, which is located in the US and associated with GitHub, Inc. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy.

If a user has visited ashishgehar.github.io, they should immediately change their passwords for any accounts that may have been compromised. Users should also monitor their account activity for any unauthorized transactions or changes. It is recommended to enable two-factor authentication (2FA) for all sensitive accounts and to report the incident to their organization's IT security team if applicable. Performing a full system scan for malware is also advisable to ensure that no additional threats were introduced.