tusharsharma2606[.]github[.]io

This domain, tusharsharma2606.github.io, poses a specific generic phishing threat. The domain is hosted on GitHub Pages infrastructure and is designed to deceive visitors into disclosing sensitive information, such as login credentials or personal data. Analysis indicates that the site mimics legitimate services to harvest user input, leveraging the trusted GitHub platform to evade initial suspicion. The threat is active and accessible, with the domain still resolving to its hosting IP.

Evidence confirms the malicious nature of this domain. VirusTotal reports that 8 out of 95 security vendors flag the domain as malicious, indicating a consensus among multiple detection engines. The domain is registered through GitHub, Inc., and its SSL certificate is issued by Let's Encrypt, a common certificate authority for both legitimate and malicious sites. Infrastructure analysis reveals that the domain resolves to IP address 185.199.108.153, which is part of GitHub's content delivery network. The domain is currently active and not blocklisted by the majority of vendors, though the 8 detections highlight its risk.

Users who have visited this domain should immediately close the browser tab and avoid entering any personal information. If credentials were submitted, users must change passwords on the affected accounts and enable multi-factor authentication where available. It is also recommended to scan the device with updated security software and monitor financial accounts for unauthorized activity. The domain should be reported to GitHub's abuse team for takedown, and users should remain cautious of similar phishing pages hosted on subdomains of trusted platforms.