nandhukrishna-vs[.]github[.]io

Analysis of the domain nandhukrishna-vs.github.io indicates that it is actively being leveraged for a generic phishing campaign. The domain was registered through GitHub, Inc., which provides the underlying hosting platform for many static sites. DNS resolution points to the IP address 185.199.109.153, an address associated with GitHub Pages infrastructure. No authoritative nameserver records were returned, as indicated by the NS_NOT_FOUND entry, suggesting that standard DNS queries for nameserver information do not yield results.

The domain is currently listed on one security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, demonstrating that at least one external sinkhole has taken action against it. VirusTotal analysis shows that 14 of 91 security vendors have flagged the domain, providing independent confirmation of malicious intent. The limited visibility into page content, SSL certificate details, HTTP response codes, or Safe Browsing status means that the exact payload or credential‑stealing mechanisms remain unverified.

Defenders should prioritize immediate containment by adding the domain to network‑level deny lists and by blocking outbound connections to its hosting IP. Continuous monitoring of DNS queries for the domain and its resolved IP is recommended, as well as periodic re‑scanning with VirusTotal or similar aggregators to track any changes in detection rates. Given the GitHub Pages hosting, any takedown request should be directed to GitHub’s abuse reporting channel, citing the observed malicious activity and the existing blocklist entries.