nishanasharin[.]github[.]io

Analysis indicates that the subdomain nishanasharin.github.io is actively leveraged in a high‑risk phishing campaign as of the report date, July 29, 2026. The domain is registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, which is part of GitHub Pages hosting infrastructure. Google Safe Browsing classifies the URL as a social engineering threat, and the domain appears on one external security blocklist. VirusTotal scans show that 16 of 91 scanning engines have flagged the domain, reflecting a consensus among multiple security vendors that the site is malicious.

Additionally, the commercial phishing mitigation service PhishDestroy has listed the domain as blocked, providing further confirmation of its malicious status. The nameserver query returned no results, suggesting that standard DNS delegation information is unavailable or obscured. No public SSL certificate details, HTTP response codes, or page title metadata have been observed, leaving the exact content and visual characteristics of the site undocumented at this time.

Defenders should prioritize immediate containment by adding the domain to URL filtering and DNS blocklists, especially within enterprise environments that enforce web‑access controls. Continuous monitoring of the associated IP address and any related GitHub Pages subdomains is advised, as the underlying hosting platform may be reused for additional malicious payloads. Threat intelligence feeds should be updated to reflect the current detection count and blocklist status, and incident response teams should consider the domain a candidate for sinkholing or network traffic redirection to mitigate potential credential harvesting attempts.