The domain bhagawatisecschool.edu.np is currently active and classified as a high‑risk generic phishing site. Infrastructure analysis shows that the domain resolves to the IPv4 address 103.233.58.13 and is serviced by the authoritative nameservers np3.himalayan.host and np4.himalayan.host. Reputation data indicates that the domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming its malicious status.
VirusTotal scanning reports five detections out of ninety‑one participating security vendors, providing independent confirmation of malicious behavior. No additional intelligence such as Safe Browsing verdicts, Open Threat Exchange (OTX) references, registrar details, SSL certificate information, HTTP response codes, trust‑score metrics, or page‑title content is available in the source data, leaving those vectors unverified at this time. The limited observable evidence—namely the resolved IP, nameserver delegation, blocklist inclusion, and multi‑vendor detections—should be sufficient for defenders to enact preventive controls.
Recommended actions include adding bhagawatisecschool.edu.np to local DNS blocklists, updating firewall and proxy filtering policies to deny traffic to the associated IP address, and monitoring for any outbound connections that reference the domain. Continuous re‑evaluation is advised, as further telemetry (e.g., page content analysis or SSL fingerprinting) may surface additional indicators that could refine detection rules or support takedown efforts.