aamnanoreen2[.]github[.]io

The domain aamnanoreen2.github.io is currently flagged as a high‑risk generic phishing site. Infrastructure analysis shows that the hostname resolves to the IPv4 address 185.199.108.153, which belongs to the GitHub Pages hosting service operated by GitHub, Inc. The registration information confirms that the domain was created through GitHub’s public registration platform, indicating that the attacker is leveraging a trusted hosting provider to increase perceived legitimacy. Google Safe Browsing has classified the URL under the “social engineering” category, and the PhishDestroy blocklist actively blocks the domain. VirusTotal reports that 18 of 91 scanned security vendors have generated detections for the domain, reinforcing the suspicion of malicious activity.

Additionally, the domain appears on a single external security blocklist, further corroborating its malicious reputation. The DNS configuration is incomplete; the nameserver query returned NS_NOT_FOUND, suggesting that the domain’s authoritative name servers are either hidden or not properly published, a technique sometimes used to hinder automated analysis. No SSL certificate details, HTTP status codes, or page‑title information are available from the supplied intelligence, leaving the exact content of the landing page unverified. Consequently, while the infrastructure and third‑party reputation signals are strong indicators of phishing intent, the specific payload or credential‑stealing mechanisms remain unknown.

Defenders should treat traffic to aamnanoreen2.github.io as malicious. Immediate actions include adding the domain to network and endpoint blocklists, configuring web‑proxy filters to deny HTTP/HTTPS requests, and monitoring DNS logs for any resolution attempts.