niyasharma25[.]github[.]io

This domain, niyasharma25.github.io, is identified as a high-risk phishing infrastructure designed for credential harvesting. Analysis indicates the site likely mimics legitimate login portals or financial services to deceive users into submitting sensitive authentication details, including usernames, passwords, and multi-factor authentication codes. The domain leverages GitHub Pages for hosting, a tactic commonly exploited due to its free availability and association with trusted platforms, which may reduce user suspicion during initial access. Evidence supporting this assessment includes detection by 9 out of 95 security vendors on VirusTotal, indicating broad consensus among threat intelligence sources regarding its malicious nature. The domain is registered through GitHub, Inc., with a creation date of June 15, 2026, suggesting either a typo-squatting attempt or a pre-registered domain intended for future abuse. Infrastructure analysis reveals the domain appears on one security blocklist and resolves to the IP address 185.199.108.153, a known GitHub Pages hosting endpoint. Despite the current page title displaying 'Site not found', this may indicate a temporary inactive state or a deliberate evasion technique to avoid detection during analysis. Users who have visited niyasharma25.github.io or interacted with its content should immediately revoke any credentials entered on the site, particularly if they pertain to financial, email, or corporate accounts. Monitor linked accounts for unauthorized activity, including login attempts, password changes, or transactions. Reset passwords using a unique, complex string for each compromised service, and enable multi-factor authentication where available. If the domain was accessed in a corporate environment, report the incident to the internal security team for further investigation, including potential endpoint compromise or lateral movement risks. Exercise caution with any communications referencing this domain, as follow-up attacks via email or messaging platforms are likely.