prabhatbhainsora9-blip[.]github[.]io

Analysis of the domain prabhatbhainsora9-blip.github.io shows that it is actively serving a generic phishing campaign as of the report date, August 06, 2026. The domain is hosted on GitHub Pages and resolves to the IP address 185.199.108.153, which is owned by GitHub, Inc. The registration source confirms the domain was created through GitHub, Inc., indicating that the attacker leveraged a free hosting service to obscure infrastructure. VirusTotal scans have recorded four detections out of ninety‑one security vendors, providing independent confirmation that the site exhibits malicious characteristics.

The domain is currently listed on one external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, reinforcing the consensus that it should be treated as hostile. No public nameserver records were returned, and no additional metadata such as SSL certificate details, HTTP response codes, or page titles are available in the supplied intelligence, leaving those aspects of the site unverified. Defenders should continue to block the domain at network perimeter controls, update URL filtering policies to include the observed IP range, and monitor for any new indicators that may arise from further crawling or sandbox analysis.

Because the hosting provider is a legitimate cloud service, any takedown request should be directed to GitHub’s abuse reporting channel, citing the observed malicious activity and the VirusTotal detections. Continuous observation is recommended to detect potential repurposing of the same hosting account for future phishing deployments.