manas-turlapati[.]github[.]io

Analysis of the domain manas-turlapati.github.io, observed on July 20, 2026, indicates that the site is currently active and is being used for a generic phishing campaign. The domain was registered through GitHub, Inc., and resolves to the IP address 185.199.109.153, which belongs to the GitHub Pages hosting infrastructure. DNS queries for the domain return no authoritative nameserver information (NS_NOT_FOUND), suggesting that the domain relies on GitHub's default DNS configuration. The domain is listed on one external security blocklist and is actively blocked by the PhishDestroy community filter. VirusTotal has recorded detections from 13 of 91 scanning engines, providing independent confirmation of malicious intent. No additional intelligence such as page title, SSL certificate details, or HTTP response codes is available at this time, leaving the exact content and the targeted brand undefined. Given the observed indicators—GitHub‑based hosting, blocklist presence, and multi‑vendor detections—defenders should treat the domain as high‑risk. Immediate mitigation steps include adding the domain to network and endpoint blocklists, configuring web proxies to deny HTTP/HTTPS requests to the IP 185.199.109.153 when the Host header matches the domain, and monitoring DNS logs for any resolution attempts. Organizations should also review outbound traffic for connections to GitHub Pages that are not part of approved workflows, as threat actors frequently abuse such platforms to host phishing pages. Because the page content has not been publicly captured, analysts should consider requesting a safe‑browse fetch or sandbox execution to obtain the page title and any credential‑collection forms. Continuous re‑scanning with VirusTotal or similar services is recommended to capture any changes in detection scores.