krishnanishad05[.]github[.]io

Analysis as of July 29 2026 indicates that the domain krishnanishad05.github.io is actively being used for a generic phishing campaign. The site is hosted on GitHub Pages, as indicated by the registrar information, and resolves to the IP address 185.199.109.153, which belongs to the GitHub infrastructure. The domain appears on one external blocklist and is actively blocked by the PhishDestroy service, confirming that threat‑intelligence feeds have identified it as malicious. Google Safe Browsing categorises the URL as a social‑engineering threat, and VirusTotal reports that 16 of 91 scanned security vendors have flagged the domain as malicious, providing independent corroboration of its risk profile.

The risk level has been assigned as high, and the campaign remains active. Evidence does not reveal the specific lure used, the exact credential‑stealing page content, or any associated command‑and‑control infrastructure. No SSL certificate details, HTTP response codes, or page‑title information are available from the current intelligence set. Consequently, the precise attack vector and target demographics remain uncertain.

Defenders should add krishnanishad05.github.io to local deny lists and ensure that network‑level filters reference the known blocklist entry and the PhishDestroy block. Monitoring of outbound DNS queries for the IP 185.199.109.153 can help detect internal attempts to reach the malicious host. Given the presence on Google Safe Browsing and multiple vendor detections, endpoint protection solutions that incorporate URL reputation should be configured to block or quarantine connections to this domain. Continuous re‑evaluation is recommended, as additional indicators such as page content hashes or certificate fingerprints may emerge in future scans.