nishantparihar1102[.]github[.]io

PhishDestroy identifies nishantparihar1102.github.io as a generic phishing domain actively distributing social-engineering lures via a GitHub Pages-hosted interface. This domain mimics trusted platforms to deceive visitors into disclosing sensitive credentials or installing malware. The site operates under GitHub, Inc.’s infrastructure and resolves to IP 185.199.108.153, leveraging a valid Let’s Encrypt SSL certificate to appear legitimate. Further investigation is required to determine if a drainer kit or spoofed brand (e.g., financial services, tech support) is actively deployed, though the absence of detections on VirusTotal suggests preliminary evasion tactics. This domain was flagged on 2 security blocklists and explicitly marked by Google Safe Browsing with the SOCIAL_ENGINEERING classification. Technical indicators include a VirusTotal detection score of 15/95, registration through GitHub’s Pages service, and assignment to IP 185.199.108.153. While the exact creation date remains unverified, its active resolution and SSL issuance indicate recent deployment. OpenPhish and OISD blocklists confirm prior malicious associations, reinforcing the need for immediate caution. As of this assessment, nishantparihar1102.github.io remains active and unpatched. GitHub has not yet suspended the domain despite external blocklist alerts, leaving users vulnerable to credential harvesting or malware propagation. Users encountering this link should avoid interaction, report the domain via browser tools, and validate any unsolicited communications through official channels. Remaining risk is classified as under investigation due to potential evolution of the attack vector, but current evidence supports an elevated threat level requiring urgent defensive action.